EUVD-2005-2963

Malware in sbrugna...

SUSE CVE-2005-2963

The modauthshadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security...

CVE-2005-2963

The CVE-2005-2963 issue affects the mod_auth_shadow Apache module (versions 1.0–1.5 and 2.0) when AuthShadow is enabled. The vulnerability causes shadow authentication to apply to all locations using the require group directive, potentially bypassing other access controls if credentials match /et...

CVE-2005-2963: Undefined Security Weakness

The modauthshadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security...