CVE-2009-5020

Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS v2.0 5.8 MEDIUM

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://awstats.sourceforge.net/docs/awstats_changelog.txt
http://awstats.sourceforge.net/docs/awstats_changelog.txt

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:awstats:awstats::::::::
	cpe:2.3:a:awstats:awstats:1.0:::::::*
	cpe:2.3:a:awstats:awstats:2.1.:::::::*
	cpe:2.3:a:awstats:awstats:2.2.3:::::::*
	cpe:2.3:a:awstats:awstats:2.2.4:::::::*
	cpe:2.3:a:awstats:awstats:3.0:::::::*
	cpe:2.3:a:awstats:awstats:3.1:::::::*
	cpe:2.3:a:awstats:awstats:3.2:::::::*
	cpe:2.3:a:awstats:awstats:4.0:::::::*
	cpe:2.3:a:awstats:awstats:4.1:::::::*
	cpe:2.3:a:awstats:awstats:5.0:::::::*
	cpe:2.3:a:awstats:awstats:5.1:::::::*
	cpe:2.3:a:awstats:awstats:5.2:::::::*
	cpe:2.3:a:awstats:awstats:5.3:::::::*
	cpe:2.3:a:awstats:awstats:5.4:::::::*
	cpe:2.3:a:awstats:awstats:5.5:::::::*
	cpe:2.3:a:awstats:awstats:5.6:::::::*
	cpe:2.3:a:awstats:awstats:5.7:::::::*
	cpe:2.3:a:awstats:awstats:5.8:::::::*
	cpe:2.3:a:awstats:awstats:5.9:::::::*
	cpe:2.3:a:awstats:awstats:6.0:::::::*
	cpe:2.3:a:awstats:awstats:6.1:::::::*
	cpe:2.3:a:awstats:awstats:6.2:::::::*
	cpe:2.3:a:awstats:awstats:6.3:::::::*
	cpe:2.3:a:awstats:awstats:6.4:::::::*
	cpe:2.3:a:awstats:awstats:6.5:::::::*
	cpe:2.3:a:awstats:awstats:6.6:::::::*
	cpe:2.3:a:awstats:awstats:6.7:::::::*
	cpe:2.3:a:awstats:awstats:6.8:::::::*

History

21 Nov 2024, 01:11

Type	Values Removed	Values Added
References	~~() http://awstats.sourceforge.net/docs/awstats_changelog.txt -~~	() http://awstats.sourceforge.net/docs/awstats_changelog.txt -

Information

Published : 2010-12-02 16:22

Updated : 2024-11-21 01:11

NVD link : CVE-2009-5020

Mitre link : CVE-2009-5020

CVE.ORG link : CVE-2009-5020

JSON object : View

Products Affected

awstats

awstats

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2009-5020", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2010-12-02T16:22:20.613", "references": [{"url": "http://awstats.sourceforge.net/docs/awstats_changelog.txt", "source": "cve@mitre.org"}, {"url": "http://awstats.sourceforge.net/docs/awstats_changelog.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de redirecci\u00f3n abierta en awredir.pl en AWStats anterior a v6.95 permite a atacantes remotos redireccionar a usuarios a sitios web de su elecci\u00f3n y llevar a cabo ataques de phishing a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T01:11:00.300", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "966ED168-9738-44FA-85B1-B0183C2AEEFE", "versionEndIncluding": "6.9"}, {"criteria": "cpe:2.3:a:awstats:awstats:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "429BAD9D-2EE5-45F9-AE64-81297CB021E8"}, {"criteria": "cpe:2.3:a:awstats:awstats:2.1.:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFA8E3D3-78F9-47E4-926A-014E277149BF"}, {"criteria": "cpe:2.3:a:awstats:awstats:2.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D26C7A8E-253B-4A5D-AA43-76272DBCE5E1"}, {"criteria": "cpe:2.3:a:awstats:awstats:2.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "257E78AE-01A0-47D3-89DC-034707061DEE"}, {"criteria": "cpe:2.3:a:awstats:awstats:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9472B294-86D2-4EA0-A5EC-528546582B41"}, {"criteria": "cpe:2.3:a:awstats:awstats:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D1FA8C0-64DF-4B52-A034-400678D086E6"}, {"criteria": "cpe:2.3:a:awstats:awstats:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39BF58B2-6895-4131-8620-8DFEE7BE4A45"}, {"criteria": "cpe:2.3:a:awstats:awstats:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "255AE13F-5A3E-4A8E-B453-C9B10971E2E8"}, {"criteria": "cpe:2.3:a:awstats:awstats:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81C941C8-7433-4518-B25E-987380FBD615"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A13B168A-5B44-48F9-891B-0BB28AD02721"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ADC1071-123D-4C66-BFEE-D140ABCD273B"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E169347-2804-4DC0-9EC9-B3840C719EFA"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34318EAF-8E44-49AF-87C0-A2C0BB981D62"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "058FD0C7-1E3F-4EDF-B024-F9D572D78693"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "882C578E-14B6-4003-A9B2-0366F7EDCEC0"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E916066B-7CB0-4111-A450-6313724D4805"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEE32264-0980-4122-AA46-0E40D1432103"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "353361B9-864D-41E1-B4C0-337EA5373B82"}, {"criteria": "cpe:2.3:a:awstats:awstats:5.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4119D0EC-66BB-4C55-80E1-6D458492E978"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C5DFFC3-A628-4569-9AB7-3C60C3F5DDC3"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B1B44AB-45F0-4E0A-8529-610C6B8934BA"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "312C3DA6-D34A-4566-923E-F2ECD613EF96"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24439BBC-DEDA-4309-B8B5-78289476052B"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25550AA8-8C79-48EA-A904-896B5B00077B"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E37231F4-DEC9-46A7-8686-9B3C710CA396"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D01C869D-EB1E-4204-A445-FBE28608321C"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "617FF6E9-7C2C-48B4-B590-7F0E33367311"}, {"criteria": "cpe:2.3:a:awstats:awstats:6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBA8DE50-16FC-4CC5-A0CE-9C7C4858285A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}