Description
The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie.
References
- APPLE-SA-2011-10-12-4 vendor-advisory
- safari-browsing-security-bypass(70569) vdb-entry
- 76391 vdb-entry
- http://support.apple.com/kb/HT5000