CVE-2008-7294

Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...

CVE-2008-7295

CVE-2008-7295 : Affects Microsoft Internet Explorer by failing to properly restrict modifications to cookies set over HTTPS, allowing a man-in-the-middle attacker to overwrite or delete cookies via a Set-Cookie header in an HTTP response. Root cause cited as lack of HTTP Strict Transport Security...

CVE-2008-7296

Summary (CVE-2008-7296): Apple Safari is affected by a cookie-forcing vulnerability where an attacker can modify or delete cookies established over HTTPS by injecting a Set-Cookie header in an HTTP response. This stems from Safari’s insufficient restriction of HTTPS cookies and the absence of the...

CVE-2008-7298

The CVE-2008-7298 entry concerns the Android browser. It describes a vulnerability where the browser cannot properly restrict modifications to cookies established during HTTPS sessions, enabling a man-in-the-middle to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP respon...

CVE-2008-7293

Mozilla Firefox vulnerability CVE-2008-7293 affects Firefox versions before 4. The issue allows MITM attackers to overwrite or delete cookies via a Set-Cookie header in HTTP responses because HTTPS session cookies are not properly restricted, tied to the absence of the HSTS includeSubDomains feat...

CVE-2008-7293

Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...

CVE-2008-7294

Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...

CVE-2008-7295

Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...

CVE-2008-7296

Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS includeSubDomains...

CVE-2008-7297

Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS includeSubDomains featur...

CVE-2008-7298

The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...

CVE-2008-7294

CVE-2008-7294 affects Google Chrome prior to 4.0.211.0. The issue allows a man-in-the-middle to modify cookies established over HTTPS by injecting or removing cookies via a Set-Cookie header in an HTTP response, related to the absence of HSTS includeSubDomains. Impact is limited to cookie integri...

CVE-2008-7294

Removed by vendor...

CentOS Update for nss CESA-2011:0472 centos4 i386

Check for the Version of nss OpenVAS Vulnerability Test CentOS Update for nss CESA-2011:0472 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for squirrelmail CESA-2009:0010 centos3 i386

Check for the Version of squirrelmail OpenVAS Vulnerability Test CentOS Update for squirrelmail CESA-2009:0010 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

PT-2011-1288

Name of the Vulnerable Software and Affected Versions Apple Safari affected versions not specified Description The issue is related to Apple Safari's inability to properly restrict modifications to cookies established in HTTPS sessions. This allows man-in-the-middle attackers to overwrite or dele...

PT-2011-1289

Name of the Vulnerable Software and Affected Versions Opera affected versions not specified Description The issue is related to Opera's inability to properly restrict modifications to cookies established in HTTPS sessions. This allows man-in-the-middle attackers to overwrite or delete arbitrary...

PT-2011-1287

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Description The issue is related to Microsoft Internet Explorer's inability to properly restrict modifications to cookies established in HTTPS sessions. This allows man-in-the-middle...

PT-2011-4252

Name of the Vulnerable Software and Affected Versions Novell Data Synchronizer versions 1.x through 1.1.2 build 428, with the Mobility Pack before version 1.2 Description The issue makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation, due to...

PT-2011-1286

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 4.0.211.0 Description The issue is related to the lack of the HTTP Strict Transport Security HSTS includeSubDomains feature, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via ...