PatchTheCVEmod auth shadow vulnerabilities
Recent CVEs affecting mod auth shadow products. 2 tracked.
mod auth shadow has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-10-13. Highest priority: CVE-2005-2963 (score 52/100).
- CVE-2005-2963 HIGH 7.5 DOWNGRADE The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authenticati
- CVE-2004-0041 HIGH 7.5 DOWNGRADE The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and pass
FAQ
How do I fix mod auth shadow vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mod auth shadow being exploited right now?
None of the tracked mod auth shadow CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mod auth shadow CVE should I patch first?
CVE-2005-2963 currently ranks highest (52/100): The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authenticati.