ID CVE-2010-1151
Summary Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
References
Vulnerable Configurations
  • cpe:2.3:a:apache:apache_http_server
    cpe:2.3:a:apache:apache_http_server
CVSS
Base: 6.8 (as of 21-04-2010 - 14:45)
Impact:
Exploitability:
CWE CWE-362
CAPEC
  • Leveraging Race Conditions
    This attack targets a race condition occurring when multiple processes access and manipulate the same resource concurrently and the outcome of the execution depends on the particular order in which the access takes place. The attacker can leverage a race condition by "running the race", modifying the resource and modifying the normal execution flow. For instance a race condition can occur while accessing a file, the attacker can trick the system by replacing the original file with his version and cause the system to read the malicious file.
  • Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
    This attack targets a race condition occurring between the time of check (state) for a resource and the time of use of a resource. The typical example is the file access. The attacker can leverage a file access race condition by "running the race", meaning that he would modify the resource between the first time the target program accesses the file and the time the target program uses the file. During that period of time, the attacker could do something such as replace the file and cause an escalation of privilege.
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
nessus via4
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2010-6359.NASL
    description Fixes CVE-2010-1151 mod_auth_shadow: bad wait(2) call causes randomized authorization behaviour (#578168). Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-07-12
    plugin id 47433
    published 2010-07-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=47433
    title Fedora 12 : mod_auth_shadow-2.2-8.fc12 (2010-6359)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2010-6290.NASL
    description Fixes CVE-2010-1151 mod_auth_shadow: bad wait(2) call causes randomized authorization behaviour (#578168). Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-07-12
    plugin id 47427
    published 2010-07-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=47427
    title Fedora 13 : mod_auth_shadow-2.2-8.fc13 (2010-6290)
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2010-081.NASL
    description A vulnerability has been found and corrected in apache-mod_auth_shadow : A race condition was found in the way mod_auth_shadow used an external helper binary to validate user credentials (username / password pairs). A remote attacker could use this flaw to bypass intended access restrictions, resulting in ability to view and potentially alter resources, which should be otherwise protected by authentication (CVE-2010-1151). Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct this issue.
    last seen 2019-02-21
    modified 2018-07-19
    plugin id 45566
    published 2010-04-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=45566
    title Mandriva Linux Security Advisory : apache-mod_auth_shadow (MDVSA-2010:081)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2010-6323.NASL
    description Fixes CVE-2010-1151 mod_auth_shadow: bad wait(2) call causes randomized authorization behaviour (#578168). Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-07-12
    plugin id 47430
    published 2010-07-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=47430
    title Fedora 11 : mod_auth_shadow-2.2-8.fc11 (2010-6323)
refmap via4
bid 39538
confirm https://bugzilla.redhat.com/show_bug.cgi?id=578168
fedora
  • FEDORA-2010-6323
  • FEDORA-2010-6359
mandriva MDVSA-2010:081
secunia 39823
vupen
  • ADV-2010-0908
  • ADV-2010-1148
Last major update 27-05-2010 - 01:49
Published 20-04-2010 - 12:30
Back to Top