Lucene search

K
nvd[email protected]NVD:CVE-2004-1082
HistoryFeb 03, 2004 - 5:00 a.m.

CVE-2004-1082

2004-02-0305:00:00
web.nvd.nist.gov
6

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

66.0%

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

Affected configurations

Nvd
Node
apachehttp_serverMatch1.3
OR
apachehttp_serverMatch1.3.1
OR
apachehttp_serverMatch1.3.3
OR
apachehttp_serverMatch1.3.4
OR
apachehttp_serverMatch1.3.6
OR
apachehttp_serverMatch1.3.7dev
OR
apachehttp_serverMatch1.3.9
OR
apachehttp_serverMatch1.3.11
OR
apachehttp_serverMatch1.3.12
OR
apachehttp_serverMatch1.3.14
OR
apachehttp_serverMatch1.3.17
OR
apachehttp_serverMatch1.3.18
OR
apachehttp_serverMatch1.3.19
OR
apachehttp_serverMatch1.3.20
OR
apachehttp_serverMatch1.3.22
OR
apachehttp_serverMatch1.3.23
OR
apachehttp_serverMatch1.3.24
OR
apachehttp_serverMatch1.3.25
OR
apachehttp_serverMatch1.3.26
OR
apachehttp_serverMatch1.3.27
OR
apachehttp_serverMatch1.3.28
OR
apachehttp_serverMatch1.3.29
OR
appleapache_mod_digest_apple
OR
avayacommunication_managerMatch1.1
OR
avayacommunication_managerMatch1.3.1
OR
avayacommunication_managerMatch2.0
OR
avayacommunication_managerMatch2.0.1
OR
avayaintuity_audix_lx
OR
hpvirtualvaultMatch4.5
OR
hpvirtualvaultMatch4.6
OR
hpvirtualvaultMatch4.7
OR
hpwebproxyMatcha.02.00
OR
hpwebproxyMatcha.02.10
OR
ibmhttp_serverMatch1.3.19
Node
avayamn100
OR
avayanetwork_routing
OR
avayamodular_messaging_message_storage_serverMatch1.1
OR
avayamodular_messaging_message_storage_serverMatch2.0
OR
openbsdopenbsdMatch3.4
OR
openbsdopenbsdMatch3.5
OR
openbsdopenbsdMatchcurrent
OR
scoopenserverMatch5.0.6
OR
scoopenserverMatch5.0.7
OR
sunsolarisMatch8.0x86
OR
sunsolarisMatch9.0sparc
OR
sunsolarisMatch9.0x86
OR
sunsunosMatch5.8
VendorProductVersionCPE
apachehttp_server1.3cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*
apachehttp_server1.3.1cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*
apachehttp_server1.3.3cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*
apachehttp_server1.3.4cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*
apachehttp_server1.3.6cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*
apachehttp_server1.3.7cpe:2.3:a:apache:http_server:1.3.7:*:dev:*:*:*:*:*
apachehttp_server1.3.9cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*
apachehttp_server1.3.11cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*
apachehttp_server1.3.12cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*
apachehttp_server1.3.14cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*
Rows per page:
1-10 of 471

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

66.0%

Related for NVD:CVE-2004-1082