CVE-2004-1082 - CVE House

Status published High CVE-2004-1082

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X...

7.5 CVSS

Vulnerability Description

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-1082

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from apache

View All →

CVE-2025-58712

Amq: privilege escalation via excessive /etc/passwd permissions

Medium 6.4

CVE-2021-25958

Generation of Error Message Containing Sensitive Information in Apache OFBiz

Medium 6.5

CVE-2021-24117

In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability...

Medium 4.9

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID...

Critical 9.8

CVE-2018-14889

CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3...

High 7.8

Affected Vendor

apache

View all reports →

Affected Software

http server, apache mod digest apple, communication manager, intuity audix lx, virtualvault, webproxy, mn100, network routing, modular messaging message storage server, openbsd, openserver, solaris, sunos

Vulnerable Versions:

1.3, 1.3.1, 1.3.3, 1.3.4, 1.3.6, 1.3.7, 1.3.9, 1.3.11, 1.3.12, 1.3.14, 1.3.17, 1.3.18, 1.3.19, 1.3.20, 1.3.22, 1.3.23, 1.3.24, 1.3.25, 1.3.26, 1.3.27, 1.3.28, 1.3.29, 1.1, 2.0, 2.0.1, 4.5, 4.6, 4.7, a.02.00, a.02.10, 3.4, 3.5, current, 5.0.6, 5.0.7, 8.0, 9.0, 5.8

Timeline

Official Publish: April 21st, 2005

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.