NVD

Id
74097  
Name
CVE-2003-1025  
Description
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a %01 character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the Improper URL Canonicalization Vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-01-20  
Modified Date
2017-07-10  
Seq
2003-1025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380972 74097 CVE-2003-1025 oval:org.mitre.oval:def:490  View
380973 74097 CVE-2003-1025 oval:org.mitre.oval:def:491  View
380974 74097 CVE-2003-1025 oval:org.mitre.oval:def:510  View
380975 74097 CVE-2003-1025 oval:org.mitre.oval:def:511  View
380976 74097 CVE-2003-1025 oval:org.mitre.oval:def:512  View
380977 74097 CVE-2003-1025 oval:org.mitre.oval:def:513  View
380978 74097 CVE-2003-1025 oval:org.mitre.oval:def:526  View
380979 74097 CVE-2003-1025 VU#652278  View
380980 74097 CVE-2003-1025 MS04-004  View
380981 74097 CVE-2003-1025 20031209 Internet Explorer URL parsing vulnerability  View
380982 74097 CVE-2003-1025 TA04-033A  View
380983 74097 CVE-2003-1025 http://www.zapthedingbat.com/security/ex01/vun1.htm  View
380984 74097 CVE-2003-1025 ie-domain-url-spoofing(13935)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63644 JVNDB-2003-000370 Microsoft Internet Explorer の URL 表示機構に脆弱性 Microsoft Internet Explorer がある特殊文字を含む URL を適切に表示しないために、ナビゲーションバーに表示した Web サイトとは異なる Web サイトにアクセスしてしまう可能性があります。 CVE-2003-1025 7848 CVE-2003-1025 74097 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000370.html 2003-12-09 2007-04-01 View