Unscored USN-3518-1 1 CVE

awstats vulnerability

Published Jan 8, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that AWStats incorrectly filtered certain parameters. A
remote attacker could possibly use this issue to execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	awstats	7.2+dfsg-1ubuntu0.1
Ubuntu · 16.04 LTS 16.04:LTS	awstats	7.4+dfsg-1ubuntu0.2

Vulnerabilities 1

Unscored —

CVE-2017-1000501

Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" pa…

awstats awstats awstats Debian Ubuntu Alpine

Jan 3, 2018

References

report
https://ubuntu.com/security/CVE-2017-1000501