CVE-2009-2797

Опубликовано: 10 сент. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server.

Ссылки

http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
Mailing List
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Third Party Advisory
http://secunia.com/advisories/36677
Third Party Advisory
http://secunia.com/advisories/41856
Third Party Advisory
http://secunia.com/advisories/43068
Third Party Advisory
http://support.apple.com/kb/HT3860
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Third Party Advisory
http://www.securityfocus.com/bid/36339
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1006-1
Third Party Advisory
http://www.vupen.com/english/advisories/2010/2722
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0212
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0552
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53187
Third Party Advisory
VDB Entry
http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
Mailing List
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Third Party Advisory
http://secunia.com/advisories/36677
Third Party Advisory
http://secunia.com/advisories/41856
Third Party Advisory
http://secunia.com/advisories/43068
Third Party Advisory
http://support.apple.com/kb/HT3860
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 3.1 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:ipod_touch:*:*

Версия до 3.1.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.0196

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2009-2797

ubuntu

больше 16 лет назад

CVE-2009-2797

redhat

больше 16 лет назад

CVE-2009-2797

debian

больше 16 лет назад

The WebKit component in Safari in Apple iPhone OS before 3.1, and iPho ...

GHSA-j22q-m838-5xhc

github

больше 3 лет назад

EPSS

Процентиль: 83%

0.0196

Низкий

5 Medium

CVSS2

Дефекты

CWE-200