Rapid7 Vulnerability & Exploit Database

Apple Safari security update for CVE-2010-1406

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

Apple Safari security update for CVE-2010-1406

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
06/11/2010
Created
07/25/2018
Added
01/05/2012
Modified
09/02/2015

Description

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging, a related issue to CVE-2010-0660.

Solution(s)

  • apple-safari-upgrade-4_1
  • apple-safari-upgrade-5_0
  • apple-safari-windows-uninstall

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;