CVE-2005-2963

Related Files

Debian Linux Security Advisory 844-1

Posted Oct 6, 2005

Authored by Debian | Site security.debian.org

Debian Security Advisory DSA 844-1 - A vulnerability in mod_auth_shadow, an Apache module that lets users perform HTTP authentication against /etc/shadow, has been discovered. The module runs for all locations that use the 'require group' directive which would bypass access restrictions controlled by another authorization mechanism, such as AuthGroupFile file, if the username is listed in the password file and in the gshadow file in the proper group and the supplied password matches against the one in the shadow file.

tags | advisory, web

systems | linux, debian

advisories | CVE-2005-2963

SHA-256 | 8181012eb3961d9159ac9f63277e30706b54df18f9e5c3b044c36c8b69f3972f

Download | Favorite | View