CVE Vulnerabilities

CVE-2008-3170

Published: Jul 14, 2008 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a users HTTP session, aka Cross-Site Cooking, a related issue to CVE-2004-0746, CVE-2004-0866, and CVE-2004-0867.

Affected Software

Name Vendor Start Version End Version
Safari Apple * *

References