The remote host is missing updates announced in advisory GLSA 200508-07.

All AWStats users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-www/awstats-6.5' Note: Users with the vhosts USE flag set should manually use webapp-config to finalize the update. http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200508-07 http://bugs.gentoo.org/show_bug.cgi?id=102145 http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities

AWStats fails to validate certain log input, which could lead to the execution of arbitrary Perl code during the generation of the statistics.