5

CVE-2011-0160

WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version <= 5.0.3
Apple ≫ Safari Version 1.0
Apple ≫ Safari Version 1.0 Update beta
Apple ≫ Safari Version 1.0 Update beta2
Apple ≫ Safari Version 1.0.0
Apple ≫ Safari Version 1.0.0b1
Apple ≫ Safari Version 1.0.0b2
Apple ≫ Safari Version 1.0.1
Apple ≫ Safari Version 1.0.2
Apple ≫ Safari Version 1.0.3
Apple ≫ Safari Version 1.0.3 Update 85.8
Apple ≫ Safari Version 1.0.3 Update 85.8.1
Apple ≫ Safari Version 1.1
Apple ≫ Safari Version 1.1.0
Apple ≫ Safari Version 1.1.1
Apple ≫ Safari Version 1.2
Apple ≫ Safari Version 1.2.0
Apple ≫ Safari Version 1.2.1
Apple ≫ Safari Version 1.2.2
Apple ≫ Safari Version 1.2.3
Apple ≫ Safari Version 1.2.4
Apple ≫ Safari Version 1.2.5
Apple ≫ Safari Version 1.3
Apple ≫ Safari Version 1.3.0
Apple ≫ Safari Version 1.3.1
Apple ≫ Safari Version 1.3.2
Apple ≫ Safari Version 1.3.2 Update 312.5
Apple ≫ Safari Version 1.3.2 Update 312.6
Apple ≫ Safari Version 2
Apple ≫ Safari Version 2.0
Apple ≫ Safari Version 2.0.0
Apple ≫ Safari Version 2.0.1
Apple ≫ Safari Version 2.0.2
Apple ≫ Safari Version 2.0.3
Apple ≫ Safari Version 2.0.3 Update 417.8
Apple ≫ Safari Version 2.0.3 Update 417.9
Apple ≫ Safari Version 2.0.3 Update 417.9.2
Apple ≫ Safari Version 2.0.3 Update 417.9.3
Apple ≫ Safari Version 2.0.4
Apple ≫ Safari Version 3
Apple ≫ Safari Version 3.0
Apple ≫ Safari Version 3.0.0
Apple ≫ Safari Version 3.0.0b
Apple ≫ Safari Version 3.0.1
Apple ≫ Safari Version 3.0.1b
Apple ≫ Safari Version 3.0.2
Apple ≫ Safari Version 3.0.2b
Apple ≫ Safari Version 3.0.3
Apple ≫ Safari Version 3.0.3b
Apple ≫ Safari Version 3.0.4
Apple ≫ Safari Version 3.0.4b
Apple ≫ Safari Version 3.1.0
Apple ≫ Safari Version 3.1.0b
Apple ≫ Safari Version 3.1.1
Apple ≫ Safari Version 3.1.2
Apple ≫ Safari Version 3.2.0
Apple ≫ Safari Version 3.2.1
Apple ≫ Safari Version 3.2.2
Apple ≫ Safari Version 4.1
Apple ≫ Safari Version 4.1.1
Apple ≫ Safari Version 4.1.2
Apple ≫ Safari Version 5.0
Apple ≫ Safari Version 5.0.1
Apple ≫ Safari Version 5.0.2
Apple ≫ iPhone OS Version <= 4.2
Apple ≫ iPhone OS Version 1.0.0
Apple ≫ iPhone OS Version 1.0.1
Apple ≫ iPhone OS Version 1.0.2
Apple ≫ iPhone OS Version 1.1.0
Apple ≫ iPhone OS Version 1.1.1
Apple ≫ iPhone OS Version 1.1.2
Apple ≫ iPhone OS Version 1.1.3
Apple ≫ iPhone OS Version 1.1.4
Apple ≫ iPhone OS Version 1.1.5
Apple ≫ iPhone OS Version 2.0
Apple ≫ iPhone OS Version 2.0.0
Apple ≫ iPhone OS Version 2.0.1
Apple ≫ iPhone OS Version 2.0.2
Apple ≫ iPhone OS Version 2.1
Apple ≫ iPhone OS Version 2.1.1
Apple ≫ iPhone OS Version 2.2
Apple ≫ iPhone OS Version 2.2.1
Apple ≫ iPhone OS Version 3.0
Apple ≫ iPhone OS Version 3.0.1
Apple ≫ iPhone OS Version 3.1
Apple ≫ iPhone OS Version 3.1.2
Apple ≫ iPhone OS Version 3.1.3
Apple ≫ iPhone OS Version 3.2
Apple ≫ iPhone OS Version 3.2.1
Apple ≫ iPhone OS Version 3.2.2
Apple ≫ iPhone OS Version 4.0
Apple ≫ iPhone OS Version 4.0.1
Apple ≫ iPhone OS Version 4.0.2
Apple ≫ iPhone OS Version 4.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.55% 0.718
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
Vendor Advisory
http://support.apple.com/kb/HT4566
Vendor Advisory
http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
Vendor Advisory
http://support.apple.com/kb/HT4564
Vendor Advisory
http://www.securitytracker.com/id?1025182