CVE-2005-2963 Auth bypass in n/a

High 7.5 Published 13 Oct 2005 Updated 7 Aug 2024

Remote authenticated users can bypass security restrictions in Apache when using the mod_auth_shadow module with specific group directives.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2005-2963?

CVE-2005-2963 is a high-severity authentication bypass vulnerability in n/a, published on 13 Oct 2005. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.

Which versions are affected by CVE-2005-2963?

It affects 1 product.

Products include Mod Auth Shadow Mod Auth Shadow.

How do I fix CVE-2005-2963?

Apply the vendor's patch.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2005-2963 being exploited?

There is no known exploitation of CVE-2005-2963 in the wild and no public exploit code.

CVE-2004-0041 Auth bypass in n/a High 7.5

Sources

Also known as DSA-844-1, GHSA-92pr-mcw9-qp7f.