Mozilla Firefox Secure Cookie Security Bypass Vulnerability
BID:49129
Info
Mozilla Firefox Secure Cookie Security Bypass Vulnerability
| Bugtraq ID: | 49129 |
| Class: | Design Error |
| CVE: |
CVE-2008-7293 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 24 2008 12:00AM |
| Updated: | Mar 19 2015 08:44AM |
| Credit: | Chris Evans |
| Vulnerable: |
Mozilla Firefox 3.6.13 Mozilla Firefox 3.6.10 Mozilla Firefox 3.6.9 Mozilla Firefox 3.6.8 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.4 Mozilla Firefox 3.6.3 Mozilla Firefox 3.6.2 Mozilla Firefox 3.5.17 Mozilla Firefox 3.5.16 Mozilla Firefox 3.5.14 Mozilla Firefox 3.5.13 Mozilla Firefox 3.5.10 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.8 Mozilla Firefox 3.5.7 Mozilla Firefox 3.5.6 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.4 Mozilla Firefox 3.5.3 Mozilla Firefox 3.5.2 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 3.6.7 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.19 Mozilla Firefox 3.6.18 Mozilla Firefox 3.6.17 Mozilla Firefox 3.6.16 Mozilla Firefox 3.6.15 Mozilla Firefox 3.6.14 Mozilla Firefox 3.6.12 Mozilla Firefox 3.6.11 Mozilla Firefox 3.6 Beta 3 Mozilla Firefox 3.6 Beta 2 Mozilla Firefox 3.6 Mozilla Firefox 3.5.19 Mozilla Firefox 3.5.18 Mozilla Firefox 3.5.17 Mozilla Firefox 3.5.15 Mozilla Firefox 3.5.12 Mozilla Firefox 3.5.11 |
| Not Vulnerable: |
Mozilla Firefox 4.0 |
Discussion
Mozilla Firefox Secure Cookie Security Bypass Vulnerability
Mozilla Firefox is prone to a security-bypass vulnerability that affects secure cookies (cookies that are set and exchanged only over an HTTPS communication).
Attackers can exploit this issue to overwrite or delete arbitrary cookies by sending a specially crafted HTTP response through a man-in-the-middle attack. This allows attackers to bypass security features provided by secure cookies.
Versions prior to Firefox 4 are vulnerable.
Mozilla Firefox is prone to a security-bypass vulnerability that affects secure cookies (cookies that are set and exchanged only over an HTTPS communication).
Attackers can exploit this issue to overwrite or delete arbitrary cookies by sending a specially crafted HTTP response through a man-in-the-middle attack. This allows attackers to bypass security features provided by secure cookies.
Versions prior to Firefox 4 are vulnerable.
Exploit / POC
Mozilla Firefox Secure Cookie Security Bypass Vulnerability
Attackers can exploit this issue through man-in-the-middle attacks.
Attackers can exploit this issue through man-in-the-middle attacks.
Solution / Fix
Mozilla Firefox Secure Cookie Security Bypass Vulnerability
Solution:
Updates are available. Please contact the vendor for more information.
Solution:
Updates are available. Please contact the vendor for more information.
References
Mozilla Firefox Secure Cookie Security Bypass Vulnerability
References:
References:
- [SECURITY] If a BUGLIST cookie is compromised, it can be used to XSS show_bug.cg (Mozilla)
- Browser Security Handbook (browsersec)
- Cookie forcing (Chris Evans)
- Cookie Forcing - Trust your cookies no more (Michael Coates)
- Mozilla Firefox Homepage (Mozilla)
- Some less obvious benefits of HSTS (Chris Evans)