AWStats rawlog.pm logfile Parameter Arbitrary Command Execution

high Nessus Plugin ID 14347

Language:

Synopsis

The remote host is running a logfile analyzer that is affected by an input validation vulnerability.

Description

The remote host is running AWStats, a free real-time logfile analyzer.

The AWStats Rawlog Plugin which is installed is prone to an input validation vulnerability. The issue exists in the 'logfile' URI data passwed to the 'awstats.pl' script. An attacker may exploit this to execute commands remotely or read files subject to the privileges of the affected web server.

Solution

Upgrade to the AWStats 6.4 or later.

Plugin Details

Severity: High

ID: 14347

File Name: awstats_input_vuln.nasl

Version: 1.23

Type: remote

Family: CGI abuses

Published: 8/23/2004

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:laurent_destailleur:awstats

Required KB Items: www/AWStats

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 8/19/2004

Reference Information

BID: 10950

Detections

Analytics