CVE

Id
33287  
CVE No.
CVE-2008-3170  
Status
Candidate  
Description
Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user"s HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and CVE-2004-0867.  
Phase
Assigned (20080714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362384 33287 CVE-2008-3170 MISC:http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html  View
362385 33287 CVE-2008-3170 CONFIRM:http://support.apple.com/kb/HT3338  View
362386 33287 CVE-2008-3170 APPLE:APPLE-SA-2008-12-15  View
362387 33287 CVE-2008-3170 URL:http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html  View
362388 33287 CVE-2008-3170 CERT:TA08-350A  View
362389 33287 CVE-2008-3170 URL:http://www.us-cert.gov/cas/techalerts/TA08-350A.html  View
362390 33287 CVE-2008-3170 BID:30192  View
362391 33287 CVE-2008-3170 URL:http://www.securityfocus.com/bid/30192  View
362392 33287 CVE-2008-3170 VUPEN:ADV-2008-3444  View
362393 33287 CVE-2008-3170 URL:http://www.vupen.com/english/advisories/2008/3444  View
362394 33287 CVE-2008-3170 SECTRACK:1020539  View
362395 33287 CVE-2008-3170 URL:http://www.securitytracker.com/id?1020539  View
362396 33287 CVE-2008-3170 SECUNIA:31128  View
362397 33287 CVE-2008-3170 URL:http://secunia.com/advisories/31128  View
362398 33287 CVE-2008-3170 XF:safari-domains-session-hijacking(43839)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47941 JVNDB-2008-003251 CA Internet Security Suite などに使用される CA HIPS の kmxfw.sys ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CA Internet Security Suite および Personal Firewall に使用される CA Host-Based Intrusion Prevention System (HIPS) の kmxfw.sys ドライバは、不十分な検証の不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-3174 33287 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003251.html  View