Ubuntu update for awstats - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Ubuntu update for awstats

Secunia Advisory:	SA22306
Release Date:	2006-10-10

Critical:	Less critical
Impact:	Cross Site Scripting Exposure of system information
Where:	From remote
Solution Status:	Vendor Patch

OS:	Ubuntu Linux 5.04 Ubuntu Linux 5.10 Ubuntu Linux 6.06


CVE reference:	CVE-2006-3681 (Secunia mirror) CVE-2006-3682 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Ubuntu has issued an update for awstats. This fixes some vulnerabilities, which can be exploited by malicious people to disclose system information and conduct cross-site scripting attacks. For more information: SA19725 Solution: Apply updated packages. -- Ubuntu 5.04 -- Source archives: http://security.ubuntu.com/ubuntu/poo...wstats/awstats_6.3-1ubuntu0.4.diff.gz Size/MD5: 27234 dfd36e862db2211270ccfcda1b9f4d3a http://security.ubuntu.com/ubuntu/pool/main/a/awstats/awstats_6.3-1ubuntu0.4.dsc Size/MD5: 595 967d4b14c6a5bb7e2c69c3843d15eb0a http://security.ubuntu.com/ubuntu/pool/main/a/awstats/awstats_6.3.orig.tar.gz Size/MD5: 938794 edb73007530a5800d53b9f1f90c88053 Architecture independent packages: http://security.ubuntu.com/ubuntu/poo...wstats/awstats_6.3-1ubuntu0.4_all.deb Size/MD5: 726704 52d471f9299e0bb5495c6e7db4fcc5fd -- Ubuntu 5.10 -- Source archives: http://security.ubuntu.com/ubuntu/poo...wstats/awstats_6.4-1ubuntu1.3.diff.gz Size/MD5: 20294 23e7714e08623dd464a76b5d2618c9fa http://security.ubuntu.com/ubuntu/pool/main/a/awstats/awstats_6.4-1ubuntu1.3.dsc Size/MD5: 595 e4ae507c9fc431a95b43fdc00f4a94e1 http://security.ubuntu.com/ubuntu/pool/main/a/awstats/awstats_6.4.orig.tar.gz Size/MD5: 918435 056e6fb0c7351b17fe5bbbe0aa1297b1 Architecture independent packages: http://security.ubuntu.com/ubuntu/poo...wstats/awstats_6.4-1ubuntu1.3_all.deb Size/MD5: 728744 ca061e390d9ed9056bb58e14bd8bbece -- Ubuntu 6.06 LTS -- Source archives: http://security.ubuntu.com/ubuntu/poo...wstats/awstats_6.5-1ubuntu1.2.diff.gz Size/MD5: 20075 5bdc75b3b0ae69ee240430b254b529aa http://security.ubuntu.com/ubuntu/pool/main/a/awstats/awstats_6.5-1ubuntu1.2.dsc Size/MD5: 777 67d418d1283962b1955fffe465ed5d2e http://security.ubuntu.com/ubuntu/pool/main/a/awstats/awstats_6.5.orig.tar.gz Size/MD5: 1051780 aef00b2ff5c5413bd2a868299cabd69a Architecture independent packages: http://security.ubuntu.com/ubuntu/poo...wstats/awstats_6.5-1ubuntu1.2_all.deb Size/MD5: 853276 6213e0f258c78ce25b73a1f7a0152f4e Original Advisory: http://www.ubuntu.com/usn/usn-360-1 Other References: SA19725: http://secunia.com/advisories/19725/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

463 Related Secunia Security Advisories, displaying 10

1. Ubuntu update for libxml2

2. Ubuntu update for tiff

3. Ubuntu update for postfix

4. Ubuntu update for xine-lib

5. Ubuntu update for python

6. Ubuntu update for OpenLDAP

7. Ubuntu update for thunderbird

8. Ubuntu update for php

9. Ubuntu update for firefox

10. Ubuntu update for kernel

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

2.	Wireshark Denial of Service Vulnerabilities

3.	FreeBSD ICMPv6 "Packet Too Big" MTU Denial of Service Vulnerability

4.	IBM AIX "swcons" Command Privilege Escalation Vulnerability

5.	aspWebAlbum Multiple Vulnerabilities

6.	SUSE update for IBMJava5-JRE and java-1_5_0-ibm

7.	Django Authentication Cross-Site Request Forgery

8.	Cisco Secure ACS EAP Packet Denial of Service

9.	Najdi.si Toolbar Buffer Overflow Vulnerability

10.	phpBB Cross Site Scripting and Unspecified Vulnerabilities