Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-1082

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

Published

2004-02-03T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache http_server 1.3 Yes
Application apache http_server 1.3.1 Yes
Application apache http_server 1.3.3 Yes
Application apache http_server 1.3.4 Yes
Application apache http_server 1.3.6 Yes
Application apache http_server 1.3.7 Yes
Application apache http_server 1.3.9 Yes
Application apache http_server 1.3.11 Yes
Application apache http_server 1.3.12 Yes
Application apache http_server 1.3.14 Yes
Application apache http_server 1.3.17 Yes
Application apache http_server 1.3.18 Yes
Application apache http_server 1.3.19 Yes
Application apache http_server 1.3.20 Yes
Application apache http_server 1.3.22 Yes
Application apache http_server 1.3.23 Yes
Application apache http_server 1.3.24 Yes
Application apache http_server 1.3.25 Yes
Application apache http_server 1.3.26 Yes
Application apache http_server 1.3.27 Yes
Application apache http_server 1.3.28 Yes
Application apache http_server 1.3.29 Yes
Application apple apache_mod_digest_apple * Yes
Application avaya communication_manager 1.1 Yes
Application avaya communication_manager 1.3.1 Yes
Application avaya communication_manager 2.0 Yes
Application avaya communication_manager 2.0.1 Yes
Application avaya intuity_audix_lx * Yes
Application hp virtualvault 4.5 Yes
Application hp virtualvault 4.6 Yes
Application hp virtualvault 4.7 Yes
Application hp webproxy a.02.00 Yes
Application hp webproxy a.02.10 Yes
Application ibm http_server 1.3.19 Yes
Application avaya mn100 * Yes
Application avaya network_routing * Yes
Operating System avaya modular_messaging_message_storage_server 1.1 Yes
Operating System avaya modular_messaging_message_storage_server 2.0 Yes
Operating System openbsd openbsd 3.4 Yes
Operating System openbsd openbsd 3.5 Yes
Operating System openbsd openbsd current Yes
Operating System sco openserver 5.0.6 Yes
Operating System sco openserver 5.0.7 Yes
Operating System sun solaris 8.0 Yes
Operating System sun solaris 9.0 Yes
Operating System sun solaris 9.0 Yes
Operating System sun sunos 5.8 Yes
References