Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2797
HistorySep 10, 2009 - 12:00 a.m.

CVE-2009-2797

2009-09-1000:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.7%

The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS
before 3.1.1 for iPod touch, does not remove usernames and passwords from
URLs sent in Referer headers, which allows remote attackers to obtain
sensitive information by reading Referer logs on a web server.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchwebkit< 1.2.5-0ubuntu0.9.10.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.7%

Related for UB:CVE-2009-2797