VDB

GCVE-110-CERTCC-2010-870532

GCVE-110-CERTCC-2010-870532
Advisory Published
Vulnetix · Advisory published August 18, 2010
AWStats fails to properly handle "\\" when specifying a configuration file directory. This could allow an attacker to specify an arbitrary configuration file located on an SMB share.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact8population5exploitation0widely_known15score_current5.4ease_of_exploitation20
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1

Aliases

CVE-2010-4367CVE-2010-4368

References

AWStats fails to properly handle "\\" when specifying a configuration file directory
url
AWStats fails to properly handle "\\" when specifying a configuration file directory
url
AWStats fails to properly handle "\\" when specifying a configuration file directory
url
AWStats fails to properly handle "\\" when specifying a configuration file directory
url
AWStats fails to properly handle "\\" when specifying a configuration file directory
url
AWStats fails to properly handle "\\" when specifying a configuration file directory
url
AWStats fails to properly handle "\\" when specifying a configuration file directory
advisory

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›