CVE Vulnerabilities

CVE-2003-0987

Published: Mar 03, 2004 | Modified: Jun 06, 2021
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.

Affected Software

Name Vendor Start Version End Version
Http_server Apache * 1.3.30
Red Hat Enterprise Linux 2.1 RedHat apache *
Red Hat Enterprise Linux 2.1 RedHat mod_ssl *
Stronghold 4 for Red Hat Enterprise Linux RedHat stronghold-apache *
Stronghold 4 for Red Hat Enterprise Linux RedHat stronghold-mod_ssl *
Stronghold 4 for Red Hat Enterprise Linux RedHat stronghold-php *
Apache Ubuntu dapper *
Apache Ubuntu edgy *
Apache Ubuntu feisty *

References