EUVD-2003-0080

Malware in sbrugna...

RHEL 2.1 : mod_auth_any (RHSA-2003:114)

Updated modauthany packages are available for Red Hat Enterprise Linux. These updated packages fix vulnerabilities associated with the manner in which modauthany escapes shell arguments when calling external programs. The Web server module modauthany allows the Apache httpd server to call arbitra...

CVE-2003-0084

modauthany package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters...

Important: Red Hat Security Advisory: : Updated mod_auth_any packages available

Updated modauthany packages are now available for Red Hat Linux. modauthany is a Web server module that allows the Apache httpd server to call arbitrary external programs to verify user passwords. Vulnerabilities have been found in the way modauthany escapes shell arguments when calling external...

CVE-2003-0084

The CVE-2003-0084 issue affects the mod_auth_any Apache module included in Red Hat Enterprise Linux 2.1 (and other OS) where arguments passed to external programs are not properly escaped. This enables remote attackers to execute arbitrary commands via shell metacharacters, potentially running co...

Important: Red Hat Security Advisory: mod_auth_any security update

Updated modauthany packages are available for Red Hat Enterprise Linux. These updated packages fix vulnerabilities associated with the manner in which modauthany escapes shell arguments when calling external programs. The Web server module modauthany allows the Apache httpd server to call arbitra...

Apache Mod_Auth_Any Remote Command Execution Vulnerability

Description A vulnerability has been discovered in the modauthany Apache module. The problem occurs due to insufficient sanitiziation of user-supplied arguments. As a result, it may be possible for an attacker to execute arbitrary commands, by placing shell metacharacters within an argument. All...

mod_auth_any for Apache Metacharacter Remote Command Execution

The remote host seems to be running modauthany, an Apache Module which allows the use of third-party authentication programs. This module does not properly escape shell characters when a username is supplied, and therefore an attacker may use this module to : - Execute arbitrary commands on the...