Description
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
References
- 43068 third-party-advisory
- ADV-2011-0212 vdb-entry
- http://support.apple.com/kb/HT4225
- APPLE-SA-2010-06-07-1 vendor-advisory
- 40105 third-party-advisory
- ADV-2010-1373 vdb-entry
- oval:org.mitre.oval:def:7255 vdb-entry signature
- SUSE-SR:2011:002 vendor-advisory
- 40733 vdb-entry
- 40620 vdb-entry
- 1024067 vdb-entry
- http://support.apple.com/kb/HT4196
- APPLE-SA-2010-06-21-1 vendor-advisory