Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-1580
HistoryJun 02, 2008 - 9:30 p.m.

CVE-2008-1580

2008-06-0221:30:00
CWE-200
[email protected]
web.nvd.nist.gov
20
cfnetwork
safari
apple
mac os x
ssl
certificate
web server
vulnerability
cve-2008-1580
nvd

5.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.7%

JSON

CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server’s certificate request, which allows remote web sites to obtain sensitive information (Subject data) from personally identifiable certificates, and use arbitrary certificates to track user activities across domains, a related issue to CVE-2007-4879.

CPENameOperatorVersion
apple:safariapple safarieq*

Related

prion 2
mozilla 1
securityvulns 4
cve 1
ubuntucve 1
seebug 2
openvas 26
freebsd 1
nessus 21
suse 1
osv 4
ubuntu 1
debian 4
gentoo 1
prion
prion
Design/Logic Flaw
2008-06-02 21:30:00
Code injection
2007-09-13 18:17:00
mozilla
mozilla
Privacy issue with SSL Client Authentication — Mozilla
2008-03-25 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-17
2008-03-26 00:00:00
Apple Mac OS X multiple security vulnerabilities
2008-05-30 00:00:00
Mozilla Firefox / Seamonkey multiple security vulnerabilities
2008-03-28 00:00:00
cve
cve
CVE-2007-4879
2007-09-13 18:17:00
ubuntucve
ubuntucve
CVE-2007-4879
2007-09-13 00:00:00
seebug
seebug
Apple Mac OS X 2008-003更新修复多个安全漏洞
2008-05-29 00:00:00
Mozilla Thunderbird/Seamonkey/Firefox 2.0.0.13版本修复多个安全漏洞
2008-03-31 00:00:00
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Mozilla Firefox, Thunderbird, Seamonkey: Multiple Vulnerabilities (Mar 2008) - Windows
2008-06-17 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2008-03-26 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (12b336c6-fe36-11dc-b09c-001c2514716c)
2008-03-31 00:00:00
openSUSE 10 Security Update : mozilla-xulrunner (mozilla-xulrunner-5163)
2008-04-22 00:00:00
openSUSE 10 Security Update : seamonkey (seamonkey-5153)
2008-04-11 00:00:00
suse
suse
remote code execution in MozillaFirefox
2008-04-04 15:01:05
osv
osv
iceape - regression
2008-03-28 00:00:00
iceweasel
2008-03-30 00:00:00
xulrunner
2008-03-27 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2008-03-26 00:00:00
debian
debian
[SECURITY] [DSA 1534-2] New iceape packages fix regression
2008-04-24 21:02:40
[SECURITY] [DSA 1535-1] New iceweasel packages fix several vulnerabilities
2008-03-30 12:22:31
[SECURITY] [DSA 1534-1] New iceape packages fix several vulnerabilities
2008-03-28 13:48:02
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2008-05-20 00:00:00

5.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.7%

JSON
Related for CVE-2008-1580
prion2mozilla1securityvulns4cve1ubuntucve1seebug2openvas26freebsd1nessus21suse1osv4ubuntu1debian4gentoo1