CVE-2010-1151
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.8%
Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
Affected products
n/a · n/aReferences
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041326.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041340.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=578168http://secunia.com/advisories/39823http://www.mandriva.com/security/advisories?name=MDVSA-2010:081http://www.securityfocus.com/bid/39538http://www.vupen.com/english/advisories/2010/0908http://www.vupen.com/english/advisories/2010/1148