CVE

Id
7849  
CVE No.
CVE-2003-1025  
Status
Candidate  
Description
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."  
Phase
Assigned (20040106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
46855 7849 CVE-2003-1025 BUGTRAQ:20031209 Internet Explorer URL parsing vulnerability  View
46856 7849 CVE-2003-1025 URL:http://www.securityfocus.com/archive/1/346948  View
46857 7849 CVE-2003-1025 MISC:http://www.zapthedingbat.com/security/ex01/vun1.htm  View
46858 7849 CVE-2003-1025 MS:MS04-004  View
46859 7849 CVE-2003-1025 URL:http://www.microsoft.com/technet/security/bulletin/ms04-004.asp  View
46860 7849 CVE-2003-1025 CERT:TA04-033A  View
46861 7849 CVE-2003-1025 URL:http://www.us-cert.gov/cas/techalerts/TA04-033A.html  View
46862 7849 CVE-2003-1025 CERT-VN:VU#652278  View
46863 7849 CVE-2003-1025 URL:http://www.kb.cert.org/vuls/id/652278  View
46864 7849 CVE-2003-1025 XF:ie-domain-url-spoofing(13935)  View
46865 7849 CVE-2003-1025 URL:http://xforce.iss.net/xforce/xfdb/13935  View
46866 7849 CVE-2003-1025 OVAL:oval:org.mitre.oval:def:490  View
46867 7849 CVE-2003-1025 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:490  View
46868 7849 CVE-2003-1025 OVAL:oval:org.mitre.oval:def:491  View
46869 7849 CVE-2003-1025 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:491  View
46870 7849 CVE-2003-1025 OVAL:oval:org.mitre.oval:def:510  View
46871 7849 CVE-2003-1025 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:510  View
46872 7849 CVE-2003-1025 OVAL:oval:org.mitre.oval:def:511  View
46873 7849 CVE-2003-1025 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:511  View
46874 7849 CVE-2003-1025 OVAL:oval:org.mitre.oval:def:512  View
46875 7849 CVE-2003-1025 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:512  View
46876 7849 CVE-2003-1025 OVAL:oval:org.mitre.oval:def:513  View
46877 7849 CVE-2003-1025 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:513  View
46878 7849 CVE-2003-1025 OVAL:oval:org.mitre.oval:def:526  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63631 JVNDB-2003-000357 Microsoft Internet Explorer の history.back() 関数におけるクロスサイトスクリプティングの脆弱性 Microsoft Internet Explorer には、サブフレームを含む Web ページにおいてセキュリティゾーンが回避される脆弱性が存在します。 CVE-2003-1026 7849 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000357.html  View