CVE-2010-0554

CVE-2010-0554 describes a critical authentication bypass vulnerability in Geo++ GNCASTER versions 1.4.0.7 and earlier. The flaw stems from the HTTP Authentication implementation reusing the same nonce for all authentication attempts. This allows remote attackers to perform replay attacks, leading to session hijacking or complete authentication bypass. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and low attack complexity to achieve partial confidentiality, integrity, and availability impacts. While no public exploit code or active exploitation has been identified, and community discussion is minimal, the fundamental design flaw poses a significant risk.