CVE-2004-1082
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
Date published : 2005-04-21
http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html