high7.5
CVE-2004-1082
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to repl…
Impact
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | Versions 1.3, 1.3.1, 1.3.3, 1.3.4, 1.3.6, 1.3.7 |
| Apple | Apache Mod Digest Apple | All versions |
| Avaya | Communication Manager | Versions 1.1, 1.3.1, 2.0, 2.0.1 |
| Avaya | Intuity Audix Lx | All versions |
| Hp | Virtualvault | Versions 4.5, 4.6, 4.7 |
| Hp | Webproxy | Versions a.02.00, a.02.10 |
| Ibm | Http Server | Version 1.3.19 |
| Avaya | Mn100 | All versions |
| Avaya | Network Routing | All versions |
| Avaya | Modular Messaging Message Storage Server | Versions 1.1, 2.0 |
| Openbsd | Openbsd | Versions 3.4, 3.5, current |
| Sco | Openserver | Versions 5.0.6, 5.0.7 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html
- http://www.ciac.org/ciac/bulletins/p-049.shtml
- http://www.securityfocus.com/bid/9571
- http://www.securitytracker.com/alerts/2004/Dec/1012414.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18347
- http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html
- http://www.ciac.org/ciac/bulletins/p-049.shtml
- http://www.securityfocus.com/bid/9571
- http://www.securitytracker.com/alerts/2004/Dec/1012414.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18347