CVE

Id
33779  
CVE No.
CVE-2008-3662  
Status
Candidate  
Description
Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.  
Phase
Assigned (20080812)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368438 33779 CVE-2008-3662 BUGTRAQ:20080918 menalto gallery: Session hijacking vulnerability, CVE-2008-3662  View
368439 33779 CVE-2008-3662 URL:http://www.securityfocus.com/archive/1/archive/1/496509/100/0/threaded  View
368440 33779 CVE-2008-3662 FULLDISC:20080918 menalto gallery: Session hijacking vulnerability, CVE-2008-3662  View
368441 33779 CVE-2008-3662 URL:http://seclists.org/fulldisclosure/2008/Sep/0379.html  View
368442 33779 CVE-2008-3662 MISC:http://int21.de/cve/CVE-2008-3662-gallery.html  View
368443 33779 CVE-2008-3662 CONFIRM:http://gallery.menalto.com/gallery_1.5.9_released  View
368444 33779 CVE-2008-3662 CONFIRM:http://gallery.menalto.com/gallery_2.2.6_released  View
368445 33779 CVE-2008-3662 FEDORA:FEDORA-2008-11230  View
368446 33779 CVE-2008-3662 URL:https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html  View
368447 33779 CVE-2008-3662 FEDORA:FEDORA-2008-11258  View
368448 33779 CVE-2008-3662 URL:https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html  View
368449 33779 CVE-2008-3662 GENTOO:GLSA-200811-02  View
368450 33779 CVE-2008-3662 URL:http://security.gentoo.org/glsa/glsa-200811-02.xml  View
368451 33779 CVE-2008-3662 BID:31231  View
368452 33779 CVE-2008-3662 URL:http://www.securityfocus.com/bid/31231  View
368453 33779 CVE-2008-3662 SECUNIA:32662  View
368454 33779 CVE-2008-3662 URL:http://secunia.com/advisories/32662  View
368455 33779 CVE-2008-3662 SECUNIA:33144  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46309 JVNDB-2008-001619 Sun Solaris の sendfilev/sendfile システムコールに関するサービス運用妨害 (DoS) の脆弱性 Sun Solaris には、sendfilev, sendfile システムコールを使用するファイルの取り扱いに不備があり、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2008-3666 33779 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001619.html  View