Apache Mod_Auth_Shadow Authentication Bypass Vulnerability
BID:15224
Info
Apache Mod_Auth_Shadow Authentication Bypass Vulnerability
| Bugtraq ID: | 15224 |
| Class: | Design Error |
| CVE: |
CVE-2005-2963 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 27 2005 12:00AM |
| Updated: | Jul 12 2009 05:56PM |
| Credit: | David Herselman is credited with the discovery of this vulnerability. |
| Vulnerable: |
mod_auth_shadow mod_auth_shadow 2.0 mod_auth_shadow mod_auth_shadow 1.4 mod_auth_shadow mod_auth_shadow 1.3 mod_auth_shadow mod_auth_shadow 1.2 mod_auth_shadow mod_auth_shadow 1.1 mod_auth_shadow mod_auth_shadow 1.0 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 |
| Not Vulnerable: |
mod_auth_shadow mod_auth_shadow 2.1 mod_auth_shadow mod_auth_shadow 1.5 |
Discussion
Apache Mod_Auth_Shadow Authentication Bypass Vulnerability
mod_auth_shadow is prone to a vulnerability that may bypass expected authentication routines.
An attacker can exploit this vulnerability to bypass security restrictions and gain access to possibly sensitive or privileged information. Information obtained may be used in further attacks against the underlying system; other attacks are also possible.
mod_auth_shadow is prone to a vulnerability that may bypass expected authentication routines.
An attacker can exploit this vulnerability to bypass security restrictions and gain access to possibly sensitive or privileged information. Information obtained may be used in further attacks against the underlying system; other attacks are also possible.
Exploit / POC
Apache Mod_Auth_Shadow Authentication Bypass Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Apache Mod_Auth_Shadow Authentication Bypass Vulnerability
Solution:
Debian Linux has released security advisory DSA-844-1 addressing this issue. Please see the referenced advisory for further information.
Mandriva Linux has released security advisory MDKSA-2005:200 addressing this issue. Please see the referenced advisory for further information.
The vendor has address this issue in mod_auth_shadow version 1.5 and 2.1:
mod_auth_shadow mod_auth_shadow 1.0
mod_auth_shadow mod_auth_shadow 1.1
mod_auth_shadow mod_auth_shadow 1.2
mod_auth_shadow mod_auth_shadow 1.3
mod_auth_shadow mod_auth_shadow 1.4
mod_auth_shadow mod_auth_shadow 2.0
Solution:
Debian Linux has released security advisory DSA-844-1 addressing this issue. Please see the referenced advisory for further information.
Mandriva Linux has released security advisory MDKSA-2005:200 addressing this issue. Please see the referenced advisory for further information.
The vendor has address this issue in mod_auth_shadow version 1.5 and 2.1:
mod_auth_shadow mod_auth_shadow 1.0
-
mod_auth_shadow mod_auth_shadow-1.5.tar.gz
http://prdownloads.sourceforge.net/mod-auth-shadow/mod_auth_shadow-1.5 .tar.gz?download
mod_auth_shadow mod_auth_shadow 1.1
-
mod_auth_shadow mod_auth_shadow-1.5.tar.gz
http://prdownloads.sourceforge.net/mod-auth-shadow/mod_auth_shadow-1.5 .tar.gz?download
mod_auth_shadow mod_auth_shadow 1.2
-
mod_auth_shadow mod_auth_shadow-1.5.tar.gz
http://prdownloads.sourceforge.net/mod-auth-shadow/mod_auth_shadow-1.5 .tar.gz?download
mod_auth_shadow mod_auth_shadow 1.3
-
mod_auth_shadow mod_auth_shadow-1.5.tar.gz
http://prdownloads.sourceforge.net/mod-auth-shadow/mod_auth_shadow-1.5 .tar.gz?download
mod_auth_shadow mod_auth_shadow 1.4
-
mod_auth_shadow mod_auth_shadow-1.5.tar.gz
http://prdownloads.sourceforge.net/mod-auth-shadow/mod_auth_shadow-1.5 .tar.gz?download
mod_auth_shadow mod_auth_shadow 2.0
-
mod_auth_shadow mod_auth_shadow-2.1.tar.gz
http://prdownloads.sourceforge.net/mod-auth-shadow/mod_auth_shadow-2.1 .tar.gz?download
References
Apache Mod_Auth_Shadow Authentication Bypass Vulnerability
References:
References:
- Debian Bug report logs - #323789 (Debian)
- Project Homepage (mod_auth_shadow)