oss-security - CVE request: awstats before 7.1 awredir.pl vulnerability

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 25 Oct 2012 11:07:06 +0200
From: Hanno BÃ¶ck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: awstats before 7.1 awredir.pl vulnerability

http://awstats.sourceforge.net/docs/awstats_changelog.txt
- Security fix into awredir.pl

I didn't find any more info, but please assign a CVE.
(and i found there were awredir issues before that got CVE-2009-5020,
but I think this is a different issue, at least if their changelogs are
correct)

-- 
Hanno Böck		mail/jabber: hanno@...eck.de
GPG: BBB51E42		http://www.hboeck.de/

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.