7.5
CVE-2005-2963
- EPSS 2.44%
- Veröffentlicht 13.10.2005 21:02:00
- Zuletzt bearbeitet 16.06.2026 22:15:59
- Quelle security@debian.org
- CVE-Watchlists
- Unerledigt
LoginThe mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mod Auth Shadow ≫ Mod Auth Shadow Version1.0
Mod Auth Shadow ≫ Mod Auth Shadow Version1.1
Mod Auth Shadow ≫ Mod Auth Shadow Version1.2
Mod Auth Shadow ≫ Mod Auth Shadow Version1.3
Mod Auth Shadow ≫ Mod Auth Shadow Version1.4
Mod Auth Shadow ≫ Mod Auth Shadow Version1.5
Mod Auth Shadow ≫ Mod Auth Shadow Version2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.44% | 0.822 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789
http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200
http://secunia.com/advisories/17060/
http://secunia.com/advisories/17067
http://secunia.com/advisories/17348
http://www.debian.org/security/2005/dsa-844
http://www.osvdb.org/19863
http://www.securityfocus.com/bid/15224
https://exchange.xforce.ibmcloud.com/vulnerabilities/22520