Apache HTTP server Apple Mac OS X Server mod_digest_apple module could allow an attacker to replay responses
| macos-moddigest-response-replay (18347) |  Medium Risk |
Description:
The mod_digest_apple module in Apache HTTP server running on Mac OS X versions 10.3.6 and 10.2.8 fails to properly validate the nonce, which is a parameter that varies with time of a client's response. This vulnerability may allow the attacker to replay a victim's response, if the victim's username and password are the same and the realm is the same, which could allow the attacker to gain unauthorized access to the vulnerable system.
Platforms Affected:
- Apache, HTTP Server
- Apple, Mac OS X Server 10.2.8
- Apple, Mac OS X Server 10.3.6
Remedy:
Apply Security Update 2004-12-02, as listed in AppleCare Knowledge Base Document 61798. See References.
Consequences:
Gain Access
References:
- AppleCare Knowledge Base Document 61798, Security Update 2004-12-02 at http://docs.info.apple.com/article.html?artnum=61798.
- CIAC Information Bulletin P-049, Apple Security Update 2004-12-02 at http://www.ciac.org/ciac/bulletins/p-049.shtml.
- BID-9571: Apache mod_digest Client-Supplied Nonce Verification Vulnerability
- CVE-2004-1082: mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
- SECTRACK ID: 1012414: Apache mod_digest_apple Lets Remote Users Replay Authentication Credentials
Reported:
Dec 02, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net