FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
bba3f684-9b1d-11ed-9a3f-b42e991fc52e	www/awstats -- Partial absolute pathname MITRE reports: It seems #90 is not completely fixed in 7.8. (that is, even after CVE-2017-1000501 and CVE-2020-29600 are fixed). In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600. Discovery 2022-12-11 Entry 2023-01-23 awstats < 7.8 CVE-2020-35176 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35176

VuXML ID

Description

bba3f684-9b1d-11ed-9a3f-b42e991fc52e

www/awstats -- Partial absolute pathname

MITRE reports:

It seems #90 is not completely fixed in 7.8. (that is, even after CVE-2017-1000501 and CVE-2020-29600 are fixed). In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.

Discovery 2022-12-11
Entry 2023-01-23
awstats

< 7.8

CVE-2020-35176
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35176