CVEvulnerability
CVE-2010-1151
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-04-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-362
Description
Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
Affected configurations
• apache apache http server
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041326.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041340.html lists.fedoraproject.org
- http://secunia.com/advisories/39823 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:081 www.mandriva.com
- http://www.securityfocus.com/bid/39538 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0908 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1148 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=578168 Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041326.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041340.html lists.fedoraproject.org
- http://secunia.com/advisories/39823 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:081 www.mandriva.com
- http://www.securityfocus.com/bid/39538 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0908 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1148 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=578168 Patch