Vulnerability CVE-2011-0160 - CERT Civis.Net

Vulnerability Name:

CVE-2011-0160 (CCN-65999)

Assigned:

2010-12-23

Published:

2011-03-09

Updated:

2011-03-31

Summary:

WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2011-0160

Source: APPLE
Type: Vendor Advisory
APPLE-SA-2011-03-09-1

Source: APPLE
Type: Vendor Advisory
APPLE-SA-2011-03-09-2

Source: CCN
Type: SA43696
Apple Safari Multiple Vulnerabilities

Source: CCN
Type: SA43698
Apple iOS Multiple Vulnerabilities

Source: CCN
Type: Apple Web site
About the security content of iOS 4.3

Source: CONFIRM
Type: Vendor Advisory
http://support.apple.com/kb/HT4564

Source: CONFIRM
Type: Vendor Advisory
http://support.apple.com/kb/HT4566

Source: CCN
Type: OSVDB ID: 75253
Apple Safari / iOS WebKit HTTP Basic Authentication Authorization HTTP Header Logging Remote Credential Disclosure

Source: CCN
Type: BID-46808
WebKit CVE-2011-0160 Unspecified Memory Corruption Vulnerability

Source: SECTRACK
Type: UNKNOWN
1025182

Source: XF
Type: UNKNOWN
appleios-webkit-basic-info-disc(65999)

Vulnerable Configuration:

Configuration 1:

cpe:/a:apple:safari:1.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0:beta:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0:beta2:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.0b1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.0b2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.3:85.8:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.1.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.1.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.2.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.2.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.2.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.2.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.2.4:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.2.5:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.3.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.3.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.3.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.3.2:312.5:*:*:*:*:*:*

OR cpe:/a:apple:safari:1.3.2:312.6:*:*:*:*:*:*

OR cpe:/a:apple:safari:2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.3:417.8:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.3:417.9:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*

OR cpe:/a:apple:safari:2.0.4:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.0b:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.1b:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.2b:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.3b:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.4:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.0.4b:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.1.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.1.0b:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.1.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.1.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.2.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.2.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:3.2.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.1.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.1.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:*:*:*:*:*:*:*:* (Version <= 5.0.3)

OR cpe:/a:apple:webkit:*:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:apple:webkit:*:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:* (Version <= 4.2)

Configuration CCN 1:

cpe:/o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:ios:4.0:-:ipodtouch:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.3:*:*:*:*:*:*:*

AND

cpe:/o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:24346	V	WebKit vulnerability in Apple Safari, which might allow remote web servers to capture credentials	2014-05-12
oval:com.ubuntu.precise:def:20110160000	V	CVE-2011-0160 on Ubuntu 12.04 LTS (precise) - medium.	2011-03-11
oval:com.ubuntu.xenial:def:201101600000000	V	CVE-2011-0160 on Ubuntu 16.04 LTS (xenial) - medium.	2011-03-11
oval:com.ubuntu.trusty:def:20110160000	V	CVE-2011-0160 on Ubuntu 14.04 LTS (trusty) - medium.	2011-03-11
oval:com.ubuntu.xenial:def:20110160000	V	CVE-2011-0160 on Ubuntu 16.04 LTS (xenial) - medium.	2011-03-11