Secunia

Dirk-Willem van Gulik has identified a security issue in Apache mod_digest, which potentially can be exploited by malicious people to gain unauthorised access to other websites.

The problem is that a replay attack can be conducted by sending the digest authentication credentials again to a different website using htdigest protection, because the "nonce" implementation is weak.

Successful exploitation requires that a person is able to sniff network traffic and thereby capture the credentials.

The vulnerability affects Apache 1.3.29 and prior.

Solution
The vulnerability has been fixed in Apache 1.3.31-dev, allowing administrators to configure a secret "nonce".
Further details available in Customer Area

Provided and/or discovered by
Dirk-Willem van Gulik

Changelog
Further details available in Customer Area

Original Advisory
http://www.mail-archive.com/dev@httpd.apache.org/msg19007.html

Deep Links
Links available in Customer Area