[Possible] AWStats Detected - Vulnerability Database

[Possible] AWStats Detected

Description

AWStats is a widely-used open-source web analytics tool that generates detailed statistics from web server, FTP, mail server, and streaming server logs. When AWStats is accessible without proper access controls, it can expose sensitive information including visitor patterns, internal URL structures, session tokens transmitted via GET parameters, administrative interface locations, and server configuration details. This exposure occurs because AWStats displays comprehensive log analysis data that reveals the internal architecture and behavior of the web application.

Remediation

Implement access controls to restrict AWStats availability to authorized users only. Apply one or more of the following measures:

1. Restrict by IP address: Configure your web server to allow access only from trusted IP addresses or internal networks.

For Apache (.htaccess or virtual host configuration):

Order Deny,Allow
Deny from all
Allow from 127.0.0.1
Allow from 192.168.1.0/24

For Nginx:

location /awstats/ {
    allow 127.0.0.1;
    allow 192.168.1.0/24;
    deny all;
}

2. Implement HTTP authentication: Require username and password to access AWStats.

For Apache:

AuthType Basic
AuthName "AWStats Access"
AuthUserFile /path/to/.htpasswd
Require valid-user

3. Move to non-public location: Relocate AWStats to a separate subdomain or port accessible only via VPN or internal network.

4. Disable public CGI access: If web-based access is not required, disable the CGI interface and use AWStats only from the command line.