CVE-2004-0041 in mod_auth_shadow
Summary
The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.
VulDB is the best source for vulnerability data and more expert information about this specific topic.