AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=112510261425888&w=2 |
Configurations
Information
Published : 2005-08-30 04:45
Updated : 2016-10-17 20:29
NVD link : CVE-2005-2732
Mitre link : CVE-2005-2732
JSON object : View
CWE
Products Affected
awstats
- awstats