~ubuntu-branches/ubuntu/warty/awstats/warty-security : changes

From Revision 3

Rev	Summary	Authors	Tags	Date
3	* SECURITY UPDATE: fix more arbitrary command execution vuln... * SECURITY UPDATE: fix more arbitrary command execution vulnerabilities * wwwroot/cgi-bin/awstats.pl: remove all non-path characters from the "config", "logfile", "pluginmode", "loadplugin", and "noloadplugin" parameters (which are defined by the remote user) to prevent execution of arbitrary shell commands through shell metacharacters. * References: similar to CAN-2005-0116 http://packetstormsecurity.nl/0501-exploits/AWStatsVulnAnalysis.pdf	Martin Pitt	6.0-4ubuntu0.2	19 years ago
2	Really fix bug#247265. Really closes: Bug#247265 (thanks to ... Really fix bug#247265. Really closes: Bug#247265 (thanks to Edward J. Shornock <ed@crazeecanuck.homelinux.net>).	Jonas Smedegaard	6.0-4	20 years ago
1	Import upstream version 6.0 Import upstream version 6.0	Jonas Smedegaard	upstream-6.0	20 years ago