CVE-2008-3172
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-3172
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Opera 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Opera是opera 公司出品的一款浏览器软件。 Opera 允许网站为具有DNS A记录的特定国家高级域设置cookies ，例如co.tv, 这会允许远程攻击者完成一个会话固定攻击和挟持一个用户的HTTP会话，又称"跨站Cooking"。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-3172
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-3172
Please Login to view more intelligence information
- https://bugzilla.mozilla.org/show_bug.cgi?id=252342x_refsource_MISC
- http://o.bulport.com/index.php?item=55x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2008-3172
Same Patch Batch · n/a · 2008-07-14 · 26 CVEs total
| CVE-2008-3171 | Apple Safari HTTPS to HTTPS Referer 信息泄露漏洞 | |
| CVE-2008-3161 | IBM Maximo 'debug.jsp'跨站注入漏洞 | |
| CVE-2008-3160 | IBM Data ONTAP 拒绝服务及敏感信息泄露漏洞 | |
| CVE-2008-3159 | Novell eDirectory ds.dlm模块整数溢出漏洞 | |
| CVE-2008-2318 | Apple Xcode WebObjects WOHyperlink信息泄露漏洞 | |
| CVE-2008-2317 | Apple Safari 资源管理错误漏洞 | |
| CVE-2008-2304 | Apple Xcode工具.funhouse文件XML数据处理缓冲区溢出漏洞 | |
| CVE-2008-2303 | Apple Safari 数字错误漏洞 | |
| CVE-2008-1809 | Novell eDirectory LDAP服务Search参数堆溢出漏洞 | |
| CVE-2008-1590 | Apple WebKit for Apple 资源管理错误漏洞 | |
| CVE-2008-1589 | Apple iPhone 输入验证错误漏洞 | |
| CVE-2008-1588 | Apple Safari 输入验证错误漏洞 | |
| CVE-2008-3173 | Microsoft Internet Explorer 权限许可和访问控制问题漏洞 | |
| CVE-2003-1559 | Microsoft Internet Explorer For Mac HTTP Referer信息泄露漏洞 | |
| CVE-2008-3170 | Apple Safari域扩展不安全Cookie访问漏洞 | |
| CVE-2008-3169 | Empire Server 'coordinate normalization bug'拒绝服务漏洞 | |
| CVE-2008-3168 | Empire Server 创建时间泄露漏洞 | |
| CVE-2008-3167 | Boonex Dolphin 多个远程文件包含漏洞 | |
| CVE-2008-3166 | BooEx Ray php文件远程代码注入漏洞 | |
| CVE-2008-3165 | fuzzylime (cms) 'rss.php' 本地文件包含漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2008-3172
No comments yet