Secunia Logo  
 
SUSE update for awstats
Secunia Advisory: SA20710
Release Date: 2006-06-20
Popularity: 5,967 views

Critical:
Highly critical
Impact: Security Bypass
System access
Where: From remote
Solution Status: Vendor Patch

OS:SUSE Linux 10
SuSE Linux 9.1
SUSE Linux 9.2
SUSE Linux 9.3

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-2237
CVE-2006-2644


Description:
SUSE has issued an update for awstats. This fixes a vulnerability and a security issue, which can be exploited by malicious people to bypass certain security restrictions or to compromise a vulnerable system.

For more information:
SA19969
SA20164

Solution:
Apply updated packages.

-- Platform Independent --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
2d8eb8d53dee2adaeab7474d39d6ae2c

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
e38bb2ae10bc598708b1e38b3e3c4bdf

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
d0e86bbc349ce339e76dbe13ed5c3e30

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
385a3eca20f8dd779f64c71449700886
ftp://ftp.suse.com/pub/suse/x86_64/up...rpm/noarch/awstats-6.6-0.1.noarch.rpm
312e17aef1372843f14e676477d5e6c8

-- Sources --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/awstats-6.6-0.1.src.rpm
4ab4c7a702ca7043fbd2e6e4fe56c8fb

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/awstats-6.6-0.1.src.rpm
bdaccf1a0eff3551e5fd3ee99129f843

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/awstats-6.6-0.1.src.rpm
0363176a39bafe164617da4ee85f05d7

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/awstats-6.6-0.1.src.rpm
2d3b029476f5ff91f3fe483ae1bad9fe
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/awstats-6.6-0.1.src.rpm
7a27454e22fd62673af6c184c0bb6956

Original Advisory:
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0007.html

Other References:
SA19969:
http://secunia.com/advisories/19969/

SA20164:
http://secunia.com/advisories/20164/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. OpenSSL DSA / ECDSA "EVP_VerifyFinal()" Spoofing Vulnerability // 55 views
2. Joomla! "X_CMS_LIBRARY_PATH" Directory Traversal Vulnerability // 43 views
3. Zeroboard Multiple Vulnerabilities // 32 views
4. Symantec Mail Security for SMTP Response Handling Denial of Service // 30 views
5. SAP GUI TabOne ActiveX Control Caption List Buffer Overflow // 28 views
6. Red Hat update for openssl // 24 views
7. Red Hat update for dbus // 22 views
8. vBulletin Personal Sticky Threads Add-on Security Bypass Vulnerability // 22 views
9. BlogHelper "common_db.inc" Information Disclosure Security Issue // 21 views
10. HP OpenView Network Node Manager Multiple Vulnerabilities // 21 views