mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
Affected Platforms
Sun SolarisAvaya Network RoutingApple Apache Mod Digest AppleApache Http ServerAvaya Communication ManagerHp WebproxyAvaya Modular Messaging Message Storage ServerHp VirtualvaultAvaya Mn100Openbsd Openbsd