Lucene search
PRIOn knowledge basePRION:CVE-2009-0144HistoryMay 13, 2009 - 3:30 p.m.
Design/Logic Flaw
2009-05-1315:30:00
PRIOn knowledge base
www.prio-n.com
3
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for “secure cookies” that are sent over unencrypted HTTP connections.
References
lists.apple.com/archives/security-announce/2009/May/msg00002.html
secunia.com/advisories/35074
support.apple.com/kb/HT3549
www.securityfocus.com/bid/34926
www.securitytracker.com/id?1022214
www.us-cert.gov/cas/techalerts/TA09-133A.html
www.vupen.com/english/advisories/2009/1297
exchange.xforce.ibmcloud.com/vulnerabilities/50479
Related
cve
cve
CVE-2009-0144
2009-05-13 15:30:00
nvd
nvd
CVE-2009-0144
2009-05-13 15:30:00
cvelist
cvelist
CVE-2009-0144
2009-05-13 15:14:00
securityvulns
securityvulns
Apple Mac OS X multiple security vulnerabilities
2009-05-29 00:00:00
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00
nessus
nessus
Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities
2009-05-13 00:00:00
openvas
openvas
Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002
2010-05-12 00:00:00
Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002
2010-05-12 00:00:00