Paketname
apache-mod_auth_shadow
Datum
2005-10-27
Advisory ID
MDKSA-2005:200
Betroffene Versionen
2006.0 i586 , 10.2 i586 , 10.1 i586 , 10.2 x86_64 , 2006.0 x86_64 , 10.1 x86_64

Problembeschreibung

The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with
AuthShadow enabled uses shadow authentication for all locations that
use the require group directive, even when other authentication
mechanisms are specified, which might allow remote authenticated users
to bypass security restrictions.

This update requires an explicit "AuthShadow on" statement if website
authentication should be checked against /etc/shadow.

The updated packages have been patched to address this issue.

Aktualisierte Pakete

2006.0 i586

 e720a14ca9e445ae9aca32a8bd077f59  2006.0/RPMS/apache-mod_auth_shadow-2.0.54_2.0-4.1.20060mdk.i586.rpm
 29be94c1a29d1c1400d84781fe25fd2d  2006.0/SRPMS/apache-mod_auth_shadow-2.0.54_2.0-4.1.20060mdk.src.rpm

10.2 i586

 aa10a068cf7bc453cd8935b48afed141  10.2/RPMS/apache2-mod_auth_shadow-2.0.53_2.0-6.2.102mdk.i586.rpm
 c7d15fcb80581c1169366d6ae56f9a1c  10.2/SRPMS/apache2-mod_auth_shadow-2.0.53_2.0-6.2.102mdk.src.rpm

10.1 i586

 528cdab76158def18a53ce798f06efbf  10.1/RPMS/apache2-mod_auth_shadow-2.0.50_2.0-3.2.101mdk.i586.rpm
 670e7f53e4d7ec420cc0ce529a11a423  10.1/SRPMS/apache2-mod_auth_shadow-2.0.50_2.0-3.2.101mdk.src.rpm

10.2 x86_64

 caa1cb7195baf33a5ea8e07f31a84825  x86_64/10.2/RPMS/apache2-mod_auth_shadow-2.0.53_2.0-6.2.102mdk.x86_64.rpm
 c7d15fcb80581c1169366d6ae56f9a1c  x86_64/10.2/SRPMS/apache2-mod_auth_shadow-2.0.53_2.0-6.2.102mdk.src.rpm

2006.0 x86_64

 19778e61e14975aa3f749068d985cf34  x86_64/2006.0/RPMS/apache-mod_auth_shadow-2.0.54_2.0-4.1.20060mdk.x86_64.rpm
 29be94c1a29d1c1400d84781fe25fd2d  x86_64/2006.0/SRPMS/apache-mod_auth_shadow-2.0.54_2.0-4.1.20060mdk.src.rpm

10.1 x86_64

 43f45a988397a72e7a00485055f00ca1  x86_64/10.1/RPMS/apache2-mod_auth_shadow-2.0.50_2.0-3.2.101mdk.x86_64.rpm
 670e7f53e4d7ec420cc0ce529a11a423  x86_64/10.1/SRPMS/apache2-mod_auth_shadow-2.0.50_2.0-3.2.101mdk.src.rpm

Referenzen