CVE-2004-1082
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the...
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
Exploit likelihood
What each source reports
NVD Score used
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
- Record
CVE-2004-1082- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
- Record
CVE-2004-1082- Updated
- 2026-11-02
EUVDEUVD-2004-1080 No score
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
- Record
EUVD-2004-1080- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhpf-qqgg-4c2j No score
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the...
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
- Record
GHSA-hhpf-qqgg-4c2j- Updated
- 2026-11-02
Affected products
- apache http server
- apple apache mod digest apple
- avaya communication manager
- avaya intuity audix lx
- avaya mn100
- avaya modular messaging message storage server
- avaya network routing
- hp virtualvault
- hp webproxy
- ibm http server
- openbsd
- sco openserver
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1082 is a high vulnerability (CVSS 7.5) in Apache Http Server, published February 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.58%, the 94th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/18347
lists.apple.com/archives/security-announce/2004/Dec/msg00000.html
securitytracker.com/alerts/2004/Dec/1012414.html
securityfocus.com/bid/9571
ciac.org/ciac/bulletins/p-049.shtml
nvd.nist.gov/vuln/detail/CVE-2004-1082
github.com/advisories/GHSA-hhpf-qqgg-4c2j