CVE-2005-0116

AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.

• CWE-20

• http://awstats.sourceforge.net/docs/awstats_changelog.txtPatch, Vendor Advisory
• http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf
• http://secunia.com/advisories/13893/Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=falseExploit, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/272296Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/13002
• http://www.securityfocus.com/bid/12298
• http://awstats.sourceforge.net/docs/awstats_changelog.txtPatch, Vendor Advisory
• http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf
• http://secunia.com/advisories/13893/Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=falseExploit, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/272296Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/13002
• http://www.securityfocus.com/bid/12298

Published

Jan 18, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0110Internet Explorer 6 on Windows XP SP2 allows remote attacker…
• CVE-2005-0111Stack-based buffer overflow in the websql CGI program in MyS…
• CVE-2005-0112The web-based administrative interface for 3Com OfficeConnec…
• CVE-2005-0113inpview in SGI IRIX allows local users to execute arbitrary …
• CVE-2005-0114vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneA…
• CVE-2005-0115Stack-based buffer overflow in DataRescue Interactive Disass…
• CVE-2005-0117Buffer overflow in XShisen before 1.36 allows local users to…
• CVE-2005-0118helvis 1.8h2_1 and earlier stores recovery files in world re…
• CVE-2005-0119helvis 1.8h2_1 and earlier allows local users to recover and…
• CVE-2005-0120helvis 1.8h2_1 and earlier allows local users to delete arbi…
• CVE-2005-0121Multiple buffer overflows in golddig 2.0 and earlier allow l…
• CVE-2005-0122Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…