Vulnerability Name:

CVE-2011-0163 (CCN-66001)

Assigned:2010-12-23
Published:2011-03-09
Updated:2017-08-17
Summary:WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2011-0163

Source: APPLE
Type: Vendor Advisory
APPLE-SA-2011-03-09-1

Source: APPLE
Type: Vendor Advisory
APPLE-SA-2011-03-09-2

Source: CCN
Type: SA43348
Photopad Cross-Site Scripting Vulnerabilities

Source: CCN
Type: SA43696
Apple Safari Multiple Vulnerabilities

Source: CCN
Type: SA43698
Apple iOS Multiple Vulnerabilities

Source: CCN
Type: Apple Web site
About the security content of iOS 4.3

Source: CONFIRM
Type: Vendor Advisory
http://support.apple.com/kb/HT4564

Source: CONFIRM
Type: Vendor Advisory
http://support.apple.com/kb/HT4566

Source: CCN
Type: OSVDB ID: 75013
Apple Safari / iOS WebKit Cached Resources Cache Poisoning Remote DoS

Source: CCN
Type: BID-46815
Apple iOS Mobile Safari Crafted Cache Launch Remote Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1025182

Source: XF
Type: UNKNOWN
appleios-cache-dos(66001)

Source: XF
Type: UNKNOWN
appleios-cache-dos(66001)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:apple:safari:1.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0:beta:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.0b1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.0b2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.3:85.8:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.3:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.3.2:312.5:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:1.3.2:312.6:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.3:417.8:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.3:417.9:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:2.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.0b:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.1b:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.2b:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.3b:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.0.4b:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.1.0b:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:3.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:4.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:4.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:4.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:5.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:5.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:*:*:*:*:*:*:*:* (Version <= 5.0.3)
  • OR cpe:/a:apple:webkit:*:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:apple:webkit:*:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:* (Version <= 4.2)

    • Configuration CCN 1:
  • cpe:/o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:5.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:5.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:5.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.0.1:-:ipodtouch:*:*:*:*:*
  • OR cpe:/o:apple:ios:4.0:-:ipodtouch:*:*:*:*:*
  • OR cpe:/a:apple:safari:5.0.3:*:*:*:*:*:*:*
  • AND
  • cpe:/o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:com.ubuntu.precise:def:20110163000
    V
    		CVE-2011-0163 on Ubuntu 12.04 LTS (precise) - low.
    2011-03-11
    oval:com.ubuntu.trusty:def:20110163000
    V
    		CVE-2011-0163 on Ubuntu 14.04 LTS (trusty) - low.
    2011-03-11
    oval:com.ubuntu.xenial:def:20110163000
    V
    		CVE-2011-0163 on Ubuntu 16.04 LTS (xenial) - low.
    2011-03-11
    oval:com.ubuntu.xenial:def:201101630000000
    V
    		CVE-2011-0163 on Ubuntu 16.04 LTS (xenial) - low.
    2011-03-11
    BACK
    apple safari 1.0
    apple safari 1.0 beta
    apple safari 1.0 beta2
    apple safari 1.0.0
    apple safari 1.0.0b1
    apple safari 1.0.0b2
    apple safari 1.0.1
    apple safari 1.0.2
    apple safari 1.0.3
    apple safari 1.0.3 85.8
    apple safari 1.0.3 85.8.1
    apple safari 1.1
    apple safari 1.1.0
    apple safari 1.1.1
    apple safari 1.2
    apple safari 1.2.0
    apple safari 1.2.1
    apple safari 1.2.2
    apple safari 1.2.3
    apple safari 1.2.4
    apple safari 1.2.5
    apple safari 1.3
    apple safari 1.3.0
    apple safari 1.3.1
    apple safari 1.3.2
    apple safari 1.3.2 312.5
    apple safari 1.3.2 312.6
    apple safari 2
    apple safari 2.0
    apple safari 2.0.0
    apple safari 2.0.1
    apple safari 2.0.2
    apple safari 2.0.3
    apple safari 2.0.3 417.8
    apple safari 2.0.3 417.9
    apple safari 2.0.3 417.9.2
    apple safari 2.0.3 417.9.3
    apple safari 2.0.4
    apple safari 3
    apple safari 3.0
    apple safari 3.0.0
    apple safari 3.0.0b
    apple safari 3.0.1
    apple safari 3.0.1b
    apple safari 3.0.2
    apple safari 3.0.2b
    apple safari 3.0.3
    apple safari 3.0.3b
    apple safari 3.0.4
    apple safari 3.0.4b
    apple safari 3.1.0
    apple safari 3.1.0b
    apple safari 3.1.1
    apple safari 3.1.2
    apple safari 3.2.0
    apple safari 3.2.1
    apple safari 3.2.2
    apple safari 4.1
    apple safari 4.1.1
    apple safari 4.1.2
    apple safari 5.0
    apple safari 5.0.1
    apple safari 5.0.2
    apple safari *
    apple webkit *
    apple webkit *
    apple iphone os 1.0.0
    apple iphone os 1.0.1
    apple iphone os 1.0.2
    apple iphone os 1.1.0
    apple iphone os 1.1.1
    apple iphone os 1.1.2
    apple iphone os 1.1.3
    apple iphone os 1.1.4
    apple iphone os 1.1.5
    apple iphone os 2.0
    apple iphone os 2.0.0
    apple iphone os 2.0.1
    apple iphone os 2.0.2
    apple iphone os 2.1
    apple iphone os 2.1.1
    apple iphone os 2.2
    apple iphone os 2.2.1
    apple iphone os 3.0
    apple iphone os 3.0.1
    apple iphone os 3.1
    apple iphone os 3.1.2
    apple iphone os 3.1.3
    apple iphone os 3.2
    apple iphone os 3.2.1
    apple iphone os 3.2.2
    apple iphone os 4.0
    apple iphone os 4.0.1
    apple iphone os 4.0.2
    apple iphone os 4.1
    apple iphone os *
    apple iphone os 2.0.0 -
    apple iphone os 2.0.1
    apple iphone os 2.0.1 -
    apple iphone os 2.0.2
    apple iphone os 2.0.2 -
    apple iphone os 2.1
    apple iphone os 2.0
    apple iphone os 3.0
    apple iphone os 3.1
    apple iphone os 3.1.2
    apple iphone os 3.1.3
    apple safari 5.0
    apple iphone os 4.0
    apple iphone os 4.0.1
    apple safari 5.0.1
    apple mac os x server 10.6.5
    apple safari 5.0.2
    apple iphone os 2.1 -
    apple iphone os 3.0 -
    apple iphone os 3.1.2 -
    apple iphone os 3.1 -
    apple iphone os 4.0.1 -
    apple iphone os 4.0 -
    apple safari 5.0.3
    apple mac os x 10.5.8
    apple mac os x server 10.5.8
    apple mac os x 10.6.5