Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-1151 | First vendor Publication | 2010-04-20 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6.8 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1151 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-362 | Race Condition |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2010-05-17 | Name : Fedora Update for mod_auth_shadow FEDORA-2010-6323 File : nvt/gb_fedora_2010_6323_mod_auth_shadow_fc11.nasl |
| 2010-05-17 | Name : Fedora Update for mod_auth_shadow FEDORA-2010-6359 File : nvt/gb_fedora_2010_6359_mod_auth_shadow_fc12.nasl |
| 2010-04-19 | Name : Mandriva Update for apache-mod_auth_shadow MDVSA-2010:081 (apache-mod_auth_sh... File : nvt/gb_mandriva_MDVSA_2010_081.nasl |
| 2010-03-02 | Name : Mandriva Update for glibc MDVA-2010:081 (glibc) File : nvt/gb_mandriva_MDVA_2010_081.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 64056 | mod_auth_shadow for Apache HTTP Server wait() Function Authentication Bypass |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-6290.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-6323.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-6359.nasl - Type : ACT_GATHER_INFO |
| 2010-04-19 | Name : The remote Mandriva Linux host is missing a security update. File : mandriva_MDVSA-2010-081.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:08:45 |
|
| 2024-11-28 12:21:30 |
|
| 2021-05-04 12:11:27 |
|
| 2021-04-22 01:11:54 |
|
| 2020-05-23 00:25:30 |
|
| 2016-04-26 19:41:43 |
|
| 2014-02-17 10:54:26 |
|
| 2013-05-10 23:21:27 |
|
