(Sun Issues Fix) Apache mod_digest May Validate Replayed Client Responses
|
|
SecurityTracker Alert ID: 1011207 |
|
SecurityTracker URL: http://securitytracker.com/id/1011207
|
|
CVE Reference:
CAN-2003-0987
(Links to External Site)
|
Date: Sep 10 2004
|
Impact:
User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 1.3.29 and prior versions
|
Description:
A vulnerability was reported in Apache mod_digest. The software may not correctly validate a client response, allowing a remote user to replay a response to gain access to an ostensibly protected system.
It is reported that mod_digest does not properly verify the nonce of a client response. A remote user may be able to replay a response to be authenticated in certain cases.
The report indicates that a remote user can capture the response from another section of the target web site (or another web site entirely). If the target user's username+password combination is the same and the realm is the same, the remote user can reportedly replay the digest response to be successfully authenticated.
Dirk-Willem van Gulik reported this flaw.
|
Impact:
A remote user may be able to be authenticated in certain cases.
|
Solution:
Sun has issued the following patches for Apache:
SPARC Platform
* Solaris 9 with patch 113146-05 or later
x86 Platform
* Solaris 9 with patch 114145-04 or later
A final resolution is pending for Solaris 8.
|
Vendor URL: www.mail-archive.com/dev@httpd.apache.org/msg19007.html (Links to External Site)
|
Cause:
Authentication error
|
Underlying OS:
UNIX (Solaris - SunOS)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Fri, 10 Sep 2004 02:11:18 -0400
Subject: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1
|
Sun has issued the following patches for Apache:
SPARC Platform
* Solaris 9 with patch 113146-05 or later
x86 Platform
* Solaris 9 with patch 114145-04 or later
A final resolution is pending for Solaris 8.
These patches address:
CAN-2003-0987: "mod_digest issue"
CAN-2003-0020: "filtering of data sent to errorlog"
CAN-2004-0174: "possible denial of service"
CAN-2003-0993: "mod_access on 64-bit platforms"
CAN-2004-0492: "buffer overflow in mod_proxy"
-----
# Sun Alert ID: 57628
# Synopsis: Security Vulnerabilities in the Apache Web Server and Apache Modules
# Category: Security
# Product: Solaris
# BugIDs: 5048900, 5069902
# Avoidance: Patch
# State: Committed
# Date Released: 24-Aug-2004
# Date Closed:
# Date Modified: 09-Sep-2004
|
|
