AWStats 6.x Multiple Remote Command Execution (Shell) Exploit

[SupaDucta]

http://www.k-otik.com/exploits/20050...ts_shell.c.php

I wonder if 6.3 is vulnerable to this also?

[easyhoster1]

Looks like 6.3 is fine,

if(argc < 2){
usage(argv);
}

printf("Awstats 5.7 - 6.2 exploit Shell 0.1\n");
printf("code by omin0us\n");
printf("dtors security group\n");
printf(".: http://dtors.ath.cx :.\n");
printf("--------------------------------------\n");

[SupaDucta]

Or he was testing until 6.2, this just prints credits on screen...