[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Information disclosure vulnerability in PubSub in Apple Safari by setting a cookie in a (1) RSS or (2) Atom feed (Mac OS X)

ID: oval:org.secpod.oval:def:3487Date: (C)2011-12-17   (M)2023-11-18
Class: VULNERABILITYFamily: macos




The host is installed with Apple Safari before 4.0.5 and is prone to a information disclosure vulnerability. A flaw is present in the application, which fails to properly implement use of the Accept Cookies preference to block cookies. Successful exploitation could allow remote web servers to track users by setting a cookie.

Platform:
Apple Mac OS X 10.8
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X Server 10.8
Apple Mac OS X Server 10.9
Apple Mac OS X Server 10.10
Product:
Apple Safari
Reference:
CVE-2010-0044
CVE    1
CVE-2010-0044
CPE    7
cpe:/a:apple:safari:4.0
cpe:/a:apple:safari:4.0.4
cpe:/a:apple:safari:4.0.0b
cpe:/a:apple:safari:4.0.3
...

© SecPod Technologies