Mod Auth Shadow

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.3:*:*:*:*:*:*:*

part: a version: 1.3 update: *

VendorMod Auth Shadow (991f2236-8e1f-504a-8007-cf4ec8e91a28)
ProductMod Auth Shadow (fa1badbc-dab7-5ea0-aa65-5b0ea4b17ab9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/perfsonar/toolkit purl2cpe 2026-06-01 10:15:43.169062

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2963 vulnerable 2026-06-08 04:48:31.002048 Details available
The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.
Published: 2005-10-13T04:00:00.000Z
Updated: 2024-08-07T22:53:30.042Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0041 vulnerable 2026-06-08 04:47:48.149069 Details available
The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.
Published: 2004-01-14T05:00:00.000Z
Updated: 2024-08-08T00:01:23.625Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.