Wireless Vulnerabilities & Exploits
Wireless Vulnerabilities & Exploits
WVE ID: WVE-2008-0012
Type: Exploit
Status: Candidate
Classification:
Hijacking
Information Disclosure
Description:
It is possible to actively capture cookies and use them to impersonate HTTPS sessions on vulnerable websites.
Discussion:
Certain websites that do not set the "secure" bit in their SSL session cookies are vulnerable to user impersonation. An attacker can use a method to collect these cookies for sites the target has visited previously by injecting iframes and images from those target sites into unencrypted TCP/IP streams. This will cause the user to send the cookie for the target site in clear-text, allowing the attacker to use the cookie and impersonate the user.
Credits
Author:
Mike
Perry
: Riverbed Technology
References
URL:
http://fscked.org/blog/fully-automated-active-https-cookie-hijacking
Released: 2008-08-14
Submitter
Nicholas
DePetrillo
(ndepetrillo@arubanetworks.com)
: Aruba Networks
Submitted: Thu Sep 18 07:02:34 -0700 2008
Candidate Date: Tue Nov 18 08:50:14 -0800 2008
