CVE-2004-1082

3 documents3 sources
Severity
7.5HIGH
EPSS
5.7%
top 9.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Apache Http ServerAvaya Communication ManagerAvaya Modular Messaging Message Storage Server+7 more
Timeline
PublishedFeb 3
Latest updateApr 29

Description

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages10 packages

▶NVDapache/http_server22 versions+21
▶NVDsco/openserver5.0.6, 5.0.7+1
▶NVDibm/http_server1.3.19
▶NVDsun/sunos5.8

Patches

Patch: lists.apple.com ↗Patch: www.ciac.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hhpf-qqgg-4c2j: mod_digest_apple for Apache 1↗2022-04-29
▶
CVEList
CVE-2004-1082: mod_digest_apple for Apache 1↗2005-04-21
▶
CVE-2004-1082 (HIGH CVSS 7.5) | mod_digest_apple for Apache 1.3.31 | cvebase.io