Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 12: 2009-12370 Critical: Awstats Script Security Improvements

fedora
Calendar Grey December 1, 2009
Dist Fedora Esm H88
Boost protection in awstats by integrating a key for scripts and enhancing parameter validation. Apply the newest patch immediately!
- Fix security in awredir.pl script by adding a security key required by default

Summary

Advanced Web Statistics is a powerful and featureful tool that generates

advanced web server graphic statistics. This server log analyzer works

from command line or as a CGI and shows you all information your log contains,

in graphical web pages. It can analyze a lot of web/wap/proxy servers like

Apache, IIS, Weblogic, Webstar, Squid, ... but also mail or ftp servers.

This program can measure visits, unique vistors, authenticated users, pages,

domains/countries, OS busiest times, robot visits, type of files, search

engines/keywords used, visits duration, HTTP errors and more...

Statistics can be updated from a browser or your scheduler.

The program also supports virtual servers, plugins and a lot of features.

With the default configuration, the statistics are available:

Update Information:

- Fix security in awredir.pl script by adding a security key required by default. - Enhance security of parameter sanitizing function.

Topics%20covered

Topics Covered

security advisory fedora critical awstats script fix web statistics parameter sanitizing

Change Log

* Thu Nov 26 2009 Aurelien Bompard - 6.95-1 - version 6.95 (security fix) - drop patch0

References


[ 1 ] Bug #540404 - Awstats: awredir.pl - require security key by default and enhance security of parameter sanitizing function https://bugzilla.redhat.com/show_bug.cgi?id=540404

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update awstats' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: awstats
Product: Fedora 12
Version: 6.95
Release: 1.fc12
URL: https://awstats.sourceforge.io/
Summary: Advanced Web Statistics

Topics%20covered

Topics Covered

security advisory fedora critical awstats script fix web statistics parameter sanitizing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here