Unscored CVE-2004-1082 EUVD-2004-1080GHSA-hhpf-qqgg-4c2j

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remo…

Published Apr 21, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

References

macos-moddigest-response-replay(18347) vdb-entry
APPLE-SA-2004-12-02 vendor-advisory
1012414 vdb-entry
9571 vdb-entry
P-049 third-party-advisory government-resource