The Wayback Machine - https://web.archive.org/web/20190105194958/http://cve.mitr...
`CVE List
`CNAs
`Board
`MVO
`News & Blog
`Go to for:
`CVSS Scores
`CPE Info
`Advanced Search
`
`1 - 3
`
`About
`
`3
`
`3
`
`Common Vulnerabilities and Exposures
`
`Full-Screen View
`
`CVE-2018-1312 Learn more at National Vulnerability Database (NVD).
`• CVSS Severity Rating • Fix Information • Vulnerable Software
`Versions • SCAP Mappings • CPE Information
`
`In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge,
`the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random
`seed. In a cluster of servers using a common Digest authentication configuration, HTTP
`requests could be replayed across servers by an attacker without detection.
`
`_.;iimi =Illi..=,
`Note: References are provided for the convenience of the reader to help distinguish between
`vulnerabilities. The list is not intended
`to be complete.
`
`• MLIST:[oss-security] 20180323 CVE-2018-1312: Weak Digest auth nonce generation in
`mod_auth_digest
`• URL:http://www.openwall.com/lists/oss-security/2018/03/24/7
`• MLIST:[debian-Its-announce] 20180530 [SECURITY] [DLA 1389-1] apache2 security
`update
`• URL:https://lists.debian.org/debian-Its-announce/2018/05/msg00020.html
`• CONFIRM:https://httpd.apache.org/security/vulnerabilities 24.html
`• CONFIRM:https://security.netapp.com/advisory/ntap-20180601-0004/
`• DEBIAN:DSA-4164
`• URL:https://www.debian.org/security/2018/dsa-4164
`• REDHAT:RHSA-2018:3558
`• URL:https://access.redhat.com/errata/RHSA-2018:3558
`• UBUNTU:USN-3627-1
`• URL:https://usn.ubuntu.com/3627-1/
`• UBUNTU:USN-3627-2
`• URL:https://usn.ubuntu.com/3627-2/
`• BID:103524
`• URL:http://www.securityfocus.com/bid/103524
`• SECTRACK: 1040571
`• URL: http://www.securitytracker.com/id/1040571
`
`Apache Software Foundation
`
`WIZ, Inc. EXHIBIT - 1102
`, inc. v. vrca Jecuruy L i 1J.
`
`WIZ, Inc. EXHIBIT - 1102
`WIZ, Inc. v. Orca Security LTD.
`
`
`
`Disclaimer: The entry creation date may reflect when the CVE
`ID was allocated or reserved, and does not necessarily indicate
`when this vulnerability was discovered, shared with the affected
`vendor, publicly disclosed, or updated in CVE.
`
`de Entry Created
`20171207
`
`%ACP f I canary'
`
`Assigned (20171207)
`
`--losed (Legacy)
`N/A
`
`This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity
`vulnerabilities.
`
`SEARCH CVE USING KEYWORDS:
`using the CVE Reference Maps.
`You can also search by reference
`
`Submit
`
`For More Information: cve@mitre.org.
`
`
Still Working On It
This document is taking longer than usual to download. This can
happen if we need to contact the court directly to obtain the
document and their servers are running slowly.
Give it another minute or two to complete, and then try the
refresh button.
One Moment Please
The filing “”
is large (MB) and is being
downloaded.
Please refresh this page in a few minutes to see if the
filing has been downloaded. The filing will also be emailed
to you when the download completes.
Sealed Document
We are unable to display this document, it may be under a court
ordered seal.
If you have proper credentials to access the file, you may proceed
directly to the court's system using your government issued username
and password.
Access Government Site
