CVEvulnerability

CVE-2005-1527

5.0 MEDIUM Published 2005-08-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-08-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses: CWE-94

Description

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.

Affected configurations

• awstats awstats (<= 6.4) • canonical ubuntu linux 5.04 • debian debian linux 3.0 • debian debian linux 3.1

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

Referenced by CWE · observed example (2)

CWE-94 Improper Control of Generation of Code weakness
CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code weakness

References

http://secunia.com/advisories/16412 Broken Link, Patch, Vendor Advisory
http://secunia.com/advisories/17463 Broken Link
http://securitytracker.com/id?1014636 Broken Link, Patch, Third Party Advisory, VDB Entry
http://www.debian.org/security/2005/dsa-892 Mailing List, Third Party Advisory
http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false Broken Link
http://www.novell.com/linux/security/advisories/2005_19_sr.html Broken Link
http://www.osvdb.org/18696 Broken Link, Patch
http://www.securiteam.com/unixfocus/5DP0J00GKE.html Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/14525 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/21769 Third Party Advisory, VDB Entry
https://usn.ubuntu.com/167-1/ Broken Link
http://secunia.com/advisories/16412 Broken Link, Patch, Vendor Advisory
http://secunia.com/advisories/17463 Broken Link
http://securitytracker.com/id?1014636 Broken Link, Patch, Third Party Advisory, VDB Entry
http://www.debian.org/security/2005/dsa-892 Mailing List, Third Party Advisory
http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false Broken Link
http://www.novell.com/linux/security/advisories/2005_19_sr.html Broken Link
http://www.osvdb.org/18696 Broken Link, Patch
http://www.securiteam.com/unixfocus/5DP0J00GKE.html Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/14525 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/21769 Third Party Advisory, VDB Entry
https://usn.ubuntu.com/167-1/ Broken Link