Apple Safari Secure Cookie Security Bypass Vulnerability
BID:49136
Info
Apple Safari Secure Cookie Security Bypass Vulnerability
| Bugtraq ID: | 49136 |
| Class: | Design Error |
| CVE: |
CVE-2008-7296 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 24 2008 12:00AM |
| Updated: | Nov 24 2008 12:00AM |
| Credit: | Chris Evans |
| Vulnerable: |
Apple Safari 4.0.5 Apple Safari 4.0.4 Apple Safari 4.0.3 Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 Apple Safari 3.1.2 Apple Safari 3.1.1 Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 Apple Safari 4.1.3 Apple Safari 4.1.2 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4 Apple Safari 3.2 Apple Safari 3.1 |
| Not Vulnerable: | |
Discussion
Apple Safari Secure Cookie Security Bypass Vulnerability
Apple Safari is prone to a security-bypass vulnerability that affects secure cookies (cookies which are set and exchanged only over an HTTPS communication).
Attackers can exploit this issue to overwrite or delete arbitrary cookies by sending a specially crafted HTTP response through a man-in-the-middle attack. This allows attackers to bypass security features provided by secure cookies.
Apple Safari is prone to a security-bypass vulnerability that affects secure cookies (cookies which are set and exchanged only over an HTTPS communication).
Attackers can exploit this issue to overwrite or delete arbitrary cookies by sending a specially crafted HTTP response through a man-in-the-middle attack. This allows attackers to bypass security features provided by secure cookies.
Exploit / POC
Apple Safari Secure Cookie Security Bypass Vulnerability
Attackers can exploit this issue through conducting man-in-the-middle attacks.
Attackers can exploit this issue through conducting man-in-the-middle attacks.
Solution / Fix
Apple Safari Secure Cookie Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Apple Safari Secure Cookie Security Bypass Vulnerability
References:
References:
- Browser Security Handbook (browsersec)
- Cookie forcing (Chris Evans)
- Cookie Forcing - Trust your cookies no more (Michael Coates)
- Safari Homepage (Apple)
- Some less obvious benefits of HSTS (Chris Evans)