CVE-2009-0144

CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive…

published May 13, 2009

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01539 · 74.6th percentile
Published
2009-05-13T15:14Z
EPSS history
Timeline
  • 13 MAY 15:14Z
    CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive…
    cvelistv5