CVE-2004-1082 mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
HighCVSS 7.5
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3 | No fix listed |
| Apache HTTP Server | = 1.3.1 | No fix listed |
| Apache HTTP Server | = 1.3.3 | No fix listed |
| Apache HTTP Server | = 1.3.4 | No fix listed |
| Apache HTTP Server | = 1.3.6 | No fix listed |
| Apache HTTP Server | = 1.3.7 | No fix listed |
| Apache HTTP Server | = 1.3.9 | No fix listed |
| Apache HTTP Server | = 1.3.11 | No fix listed |
| Apache HTTP Server | = 1.3.12 | No fix listed |
| Apache HTTP Server | = 1.3.14 | No fix listed |
| Apache HTTP Server | = 1.3.17 | No fix listed |
| Apache HTTP Server | = 1.3.18 | No fix listed |
| Apache HTTP Server | = 1.3.19 | No fix listed |
| Apache HTTP Server | = 1.3.20 | No fix listed |
| Apache HTTP Server | = 1.3.22 | No fix listed |
| Apache HTTP Server | = 1.3.23 | No fix listed |
| Apache HTTP Server | = 1.3.24 | No fix listed |
| Apache HTTP Server | = 1.3.25 | No fix listed |
| Apache HTTP Server | = 1.3.26 | No fix listed |
| Apache HTTP Server | = 1.3.27 | No fix listed |
| Apache HTTP Server | = 1.3.28 | No fix listed |
| Apache HTTP Server | = 1.3.29 | No fix listed |
| apple apache mod digest apple | All versions | No fix listed |
| avaya communication manager | = 1.1 | No fix listed |
| avaya communication manager | = 1.3.1 | No fix listed |
Show 21 more
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya communication manager | = 2.0 | No fix listed |
| avaya communication manager | = 2.0.1 | No fix listed |
| avaya intuity audix lx | All versions | No fix listed |
| HP Inc virtualvault | = 4.5 | No fix listed |
| HP Inc virtualvault | = 4.6 | No fix listed |
| HP Inc virtualvault | = 4.7 | No fix listed |
| HP Inc webproxy | = a.02.00 | No fix listed |
| HP Inc webproxy | = a.02.10 | No fix listed |
| ibm http server | = 1.3.19 | No fix listed |
| avaya mn100 | All versions | No fix listed |
| avaya network routing | All versions | No fix listed |
| avaya modular messaging message storage server | = 1.1 | No fix listed |
| avaya modular messaging message storage server | = 2.0 | No fix listed |
| OpenBSD | = 3.4 | No fix listed |
| OpenBSD | = 3.5 | No fix listed |
| OpenBSD | = current | No fix listed |
| sco openserver | = 5.0.6 | No fix listed |
| sco openserver | = 5.0.7 | No fix listed |
| sun solaris | = 8.0 | No fix listed |
| sun solaris | = 9.0 | No fix listed |
| sunos | = 5.8 | No fix listed |
References
- APPLE-SA-2004-12-02 patch vendor-advisory
- P-049 government-resource patch third-party-advisory vendor-advisory
- 9571 patch vdb-entry vendor-advisory
- 1012414 patch vdb-entry vendor-advisory
- macos-moddigest-response-replay(18347) vdb-entry