CVE-2006-6238

{"id": "CVE-2006-6238", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-12-03T19:28:00.000", "references": [{"url": "http://secunia.com/advisories/23066", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://tearesolutions.com/2006/11/how_to_steal_passwords_from_safaris_autofill.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/21329", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23066", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://tearesolutions.com/2006/11/how_to_steal_passwords_from_safaris_autofill.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/21329", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077."}, {"lang": "es", "value": "La carater\u00edstica AutoFill de Apple Safari 2.0.4 no verifica de forma adecuada que todos los campos poblados del formulario sean visibles al usuario, lo cual permite a un atacante remoto obtener informaci\u00f3n sensible, como nombres de usuario y contrase\u00f1as, a trav\u00e9s de campos de entrada de tama\u00f1o zero, una variante de CVE-2006-6077."}], "lastModified": "2024-11-21T00:22:14.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFDCF83E-620C-40FA-9901-5D939E315143"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}