Awstats users - a major hack is going on right now!!
 

this may have been posted before but anyone who is using awstats should contact your host to make sure your server has not been hacked. The hackers are getting through with one of the .pl files and gain controll over your servers and turn them into mailers. BE WARNED!!

bump for ya

hah haxx

Does anyone have a link to the details of the vulnerability, and when it was discovered?

details please

Post the exploit here for me :)

haw hawww

my hosts better know this already cuz I'm not going to contact them
that's what I pay them for :)

Good thing I don't use AWSTats.
WG

no kidding. i just removed it from a all my sites that I was using it on. Back to webalizer for me.

apparently it's been cracked for a while now. the problem is the 'kiddie-script' users must have gotten wind of this. Fuckers!

if you have version 6.3+ your safe

Hahaahhaa... Dude this has been posted here for a year or more now.

Google for 'awstats exploit' without the ticks.

There are 5 easy to use hacks for awstats and growing.

http://64.233.187.104/search?q=cache...xploit&hl= en
http://www.frsirt.com/exploits/20050124.awexpl.c.php
http://www.frsirt.com/exploits/20050...ts_shell.c.php
http://www.frsirt.com/exploits/20050...leAWSxpl.c.php
http://www.frsirt.com/exploits/20050124.awexpl.c.php

Now you can be l33t like Jucy D. Links too!

lol! ........:)