Intrusion PreventionAWStats.Configdir.Command.Execution
Description
This indicates an attack attempt against a Remote Code Execution vulnerability in AWStats.
This is due tp how the filters for user inputs fail to properly sanitize the Configdir parameter value that is passed to "awstats.pl". An attacker may include shell commands by supplying an injection string through the URL.
Affected Products
AWStats version 5.0 to 6.2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems
Recommended Actions
Upgrade to AWStat 6.3 or later.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 30425 |
| Created | Jan 21, 2012 |
| Updated | Nov 05, 2021 |
| Risk |
|
| CVE ID | CVE-2005-0116 |
| Exploit Prediction Score | 97.21% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |