CVE-2010-0554 - The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack

Back Back to CVE browser

HIGH

The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack

Published Feb 4, 2010

7.5

HIGH

CVSS 2.0

EPSS 1.52%

Description

The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (5)

http://osvdb.org/62014
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/38323
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication
x_refsource_MISC
http://www.securityfocus.com/archive/1/509199/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/55977
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/62014		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/38323		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication		x_refsource_MISC
http://www.securityfocus.com/archive/1/509199/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/55977		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 4, 2010

Updated Aug 7, 2024

Reserved Feb 4, 2010

Link CVE-2010-0554

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-0554

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-0554