File awstats-7.0-CVE-2006-2237_read_open.patch of Package awstats

File awstats-7.0-CVE-2006-2237_read_open.patch of Package awstats (Revision 287bb3f4cb623bc00fe6021ac4b2ba54)

Currently displaying revision 287bb3f4cb623bc00fe6021ac4b2ba54, show latest

--- wwwroot/cgi-bin/awstats.pl.orig	2010-10-16 19:24:03.000000000 +0200
+++ wwwroot/cgi-bin/awstats.pl	2011-01-07 20:26:06.811019892 +0100
@@ -1739,20 +1739,20 @@
 	foreach (@PossibleConfigDir) {
 		my $searchdir = $_;
 		if ( $searchdir && $searchdir !~ /[\\\/]$/ ) { $searchdir .= "/"; }
-		if ( open( CONFIG, "$searchdir$PROG.$SiteConfig.conf" ) ) {
+		if ( open( CONFIG, "<$searchdir$PROG.$SiteConfig.conf" ) ) {
 			$FileConfig = "$searchdir$PROG.$SiteConfig.conf";
 			$FileSuffix = ".$SiteConfig";
 			if ($Debug){debug("Opened config: $searchdir$PROG.$SiteConfig.conf", 2);}
 			last;
 		}else{if ($Debug){debug("Unable to open config file: $searchdir$PROG.$SiteConfig.conf", 2);}}
-		if ( open( CONFIG, "$searchdir$PROG.conf" ) ) {
+		if ( open( CONFIG, "<$searchdir$PROG.conf" ) ) {
 			$FileConfig = "$searchdir$PROG.conf";
 			$FileSuffix = '';
 			if ($Debug){debug("Opened config: $searchdir$PROG.$SiteConfig.conf", 2);}
 			last;
 		}else{if ($Debug){debug("Unable to open config file: $searchdir$PROG.conf", 2);}}
 		#CL - Added to open config if full path is passed to awstats 
-		if ( open( CONFIG, "$SiteConfig" ) ) {
+		if ( open( CONFIG, "<$SiteConfig" ) ) {
 			$FileConfig = "$SiteConfig";
 			$FileSuffix = '';
 			if ($Debug){debug("Opened config: $SiteConfig", 2);}
@@ -2308,7 +2308,7 @@
 		{
 			$searchdir .= "/";
 		}
-		if ( open( LANG, "${searchdir}awstats-$_[0].txt" ) ) {
+		if ( open( LANG, "<${searchdir}awstats-$_[0].txt" ) ) {
 			$FileLang = "${searchdir}awstats-$_[0].txt";
 			last;
 		}
@@ -2324,7 +2324,7 @@
 			{
 				$searchdir .= "/";
 			}
-			if ( open( LANG, "${searchdir}awstats-en.txt" ) ) {
+			if ( open( LANG, "<${searchdir}awstats-en.txt" ) ) {
 				$FileLang = "${searchdir}awstats-en.txt";
 				last;
 			}
@@ -3640,7 +3640,7 @@
 
 	# Open files
 	if ($withread) {
-		open( HISTORY, $filetoread )
+		open( HISTORY, "<$filetoread" )
 		  || error( "Couldn't open file \"$filetoread\" for read: $!",
 			"", "", $MigrateStats );
 		binmode HISTORY
@@ -7498,7 +7498,7 @@
 		LoadCache_hashfiles( $filetoload, $hashtoload );
 	}
 	if ( !scalar keys %$hashtoload ) {
-		open( DNSFILE, "$filetoload" )
+		open( DNSFILE, "<$filetoload" )
 		  or error("Couldn't open DNS Cache file \"$filetoload\": $!");
 
 #binmode DNSFILE;		# If we set binmode here, it seems that the load is broken on ActiveState 5.8
@@ -7893,7 +7893,7 @@
 	my $filesource = shift;
 	my $filetarget = shift;
 	if ($Debug) { debug( "FileCopy($filesource,$filetarget)", 1 ); }
-	open( FILESOURCE, "$filesource" )  || return 1;
+	open( FILESOURCE, "<$filesource" )  || return 1;
 	open( FILETARGET, ">$filetarget" ) || return 1;
 	binmode FILESOURCE;
 	binmode FILETARGET;
@@ -17520,7 +17520,7 @@
 
 	# Open log file
 	if ($Debug) { debug("Open log file \"$LogFile\""); }
-	open( LOG, "$LogFile" )
+	open( LOG, "<$LogFile" )
 	  || error("Couldn't open server log file \"$LogFile\" : $!");
 	binmode LOG
 	  ;   # Avoid premature EOF due to log files corrupted with \cZ or bin chars