VDB

GCVE-110-MAGEIA-2021-24

GCVE-110-MAGEIA-2021-24
Advisory Published
Vulnetix · Advisory published January 14, 2021
It was discovered that Awstats was vulnerable to path traversal attacks. A remote unauthenticated attacker could leverage that to perform arbitrary code execution. The previous fix did not fully address the issue when the default /etc/awstats/awstats.conf is not present (CVE-2020-29600).

Affected Products

VendorProductVersionsPlatforms
Mageiagtk+3.00 (affected), gtk+3.0-3.24.8-1.1.mga7 (unaffected)—
Mageiaawstats0 (affected), 7.7-1.1.mga7 (unaffected), 0 (affected), 7.7-1.1.mga7 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›