Apple iOS Mobile Safari Cookie Clearing Security Bypass Vulnerability
BID:46810
Info
Apple iOS Mobile Safari Cookie Clearing Security Bypass Vulnerability
| Bugtraq ID: | 46810 |
| Class: | Design Error |
| CVE: |
CVE-2011-0159 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 09 2011 12:00AM |
| Updated: | Mar 19 2015 09:37AM |
| Credit: | Erik Wong of Google Inc. |
| Vulnerable: |
Apple Mobile Safari 0 Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 |
| Not Vulnerable: |
Apple iOS 4.3 |
Discussion
Apple iOS Mobile Safari Cookie Clearing Security Bypass Vulnerability
Apple Mobile Safari for iOS is prone to a security-bypass vulnerability because it fails to properly clear cookies.
This issue may allow websites to bypass certain security restrictions and gain access to potentially sensitive information.
Versions prior to iOS 4.3 are vulnerable.
Apple Mobile Safari for iOS is prone to a security-bypass vulnerability because it fails to properly clear cookies.
This issue may allow websites to bypass certain security restrictions and gain access to potentially sensitive information.
Versions prior to iOS 4.3 are vulnerable.
Exploit / POC
Apple iOS Mobile Safari Cookie Clearing Security Bypass Vulnerability
Attackers may exploit this issue using standard tools.
Attackers may exploit this issue using standard tools.
Solution / Fix
Apple iOS Mobile Safari Cookie Clearing Security Bypass Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
Apple iOS Mobile Safari Cookie Clearing Security Bypass Vulnerability
References:
References:
- iOS Homepage (Apple)