Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-2058
HistoryJun 15, 2009 - 7:30 p.m.

CVE-2009-2058

2009-06-1519:30:00
CWE-287
[email protected]
web.nvd.nist.gov
26
cve-2009-2058
apple safari
ssl tampering
vulnerability
http host header
proxy server
man-in-the-middle attack
web script

6.6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.6%

JSON

Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an “SSL tampering” attack.

CPENameOperatorVersion
apple:safariapple safarile3.2.2

Related

prion 1
nessus 1
openvas 1
prion
prion
Hardcoded credentials
2009-06-15 19:30:00
nessus
nessus
Safari < 3.2.3 Multiple Vulnerabilities
2009-05-13 00:00:00
openvas
openvas
Apple Safari Web Script Execution Vulnerabilities (Jun 2009)
2009-06-17 00:00:00

6.6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.6%

JSON
Related for CVE-2009-2058
prion1nessus1openvas1