ALPINE-CVE-2017-1000501

See a problem?
Please try reporting it to the source first.

Source

https://security.alpinelinux.org/vuln/CVE-2017-1000501

Import Source

https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json

JSON Data

https://api.osv.dev/v1/vulns/ALPINE-CVE-2017-1000501

Upstream

CVE-2017-1000501

Published

2018-01-03T15:29:00.283Z

Modified

2025-11-19T01:01:49.264786Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution.

References

https://security.alpinelinux.org/vuln/CVE-2017-1000501

Affected packages

Alpine:v3.10

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.11

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.12

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.13

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.14

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.15

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.16

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.17

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.18

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.19

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.20

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.21

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.22

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.4

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.5-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.5

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.5-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.6

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r1

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.7

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.8

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"

Alpine:v3.9

awstats

Package

Name: awstats
Purl: pkg:apk/alpine/awstats?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.6-r2

Affected versions

6.*

6.95-r0

7.*

7.0-r0

7.1-r0

7.1.1-r0

7.2-r0

7.2-r1

7.3-r0

7.4-r0

7.5-r0

7.5-r1

7.6-r0

7.6-r1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-1000501.json"