CVE-2004-1082
High
Description
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Apache Mod Digest Apple
PublishedFeb 3, 2004
First seenFeb 3, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple apache_mod_digest_apple | No range specified | — |
| apache http_server | 1.3, 1.3.1, 1.3.3, 1.3.4, 1.3.6, 1.3.7, 1.3.9, 1.3.11, 1.3.12, 1.3.14, 1.3.17, 1.3.18, 1.3.19, 1.3.20, 1.3.22, 1.3.23, 1.3.24, 1.3.25, 1.3.26, 1.3.27, 1.3.28, 1.3.29 | — |
| avaya communication_manager | 1.1, 1.3.1, 2.0, 2.0.1 | — |
| avaya intuity_audix_lx | No range specified | — |
| hp virtualvault | 4.5, 4.6, 4.7 | — |
| hp webproxy | a.02.00, a.02.10 | — |
| ibm http_server | 1.3.19 | — |
| avaya mn100 | No range specified | — |
| avaya network_routing | No range specified | — |
| avaya modular_messaging_message_storage_server | 1.1, 2.0 | — |
| openbsd openbsd | 3.4, 3.5, current | — |
| sco openserver | 5.0.6, 5.0.7 | — |
| sun solaris | 8.0, 9.0 | — |
| sun sunos | 5.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.