CVE-2005-2963

Published: Oct 13, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.

Affected (7)

Products: Mod Auth Shadow: Mod Auth Shadow

Mod Auth Shadow

1 product

Mod Auth Shadow

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Mod Auth Shadow Mod Auth Shadow	Version 1.0
Mod Auth Shadow Mod Auth Shadow	Version 1.1
Mod Auth Shadow Mod Auth Shadow	Version 1.2
Mod Auth Shadow Mod Auth Shadow	Version 1.3
Mod Auth Shadow Mod Auth Shadow	Version 1.4
Mod Auth Shadow Mod Auth Shadow	Version 1.5
Mod Auth Shadow Mod Auth Shadow	Version 2.0

References (18)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789

Source: security@debian.org

http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200

Source: security@debian.org

http://secunia.com/advisories/17060/

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/17067

Source: security@debian.org

http://secunia.com/advisories/17348

Source: security@debian.org

http://www.debian.org/security/2005/dsa-844

Source: security@debian.org

PatchVendor Advisory

http://www.osvdb.org/19863

Source: security@debian.org

http://www.securityfocus.com/bid/15224

Source: security@debian.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22520

Source: security@debian.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789

Source: af854a3a-2127-422b-91ae-364da2661108

http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17060/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17067

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17348

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-844

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.osvdb.org/19863

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15224

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/22520

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.