Description
Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
References
- ADV-2010-0908 vdb-entry
- 39538 vdb-entry
- MDVSA-2010:081 vendor-advisory
- FEDORA-2010-6359 vendor-advisory
- 39823 third-party-advisory
- FEDORA-2010-6323 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=578168
- ADV-2010-1148 vdb-entry