Microsoft Internet Explorer 5/6 / Mozilla 1.2.1 - URI Display Obfuscation (2)
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Internet Explorer URL Spoofing (CVE-2003-1025) | 15 Nov 200900:00 | – | checkpoint_advisories |
 | CVE-2003-1025 | 6 Jan 200405:00 | – | cve |
 | CVE-2003-1025 | 6 Jan 200405:00 | – | cvelist |
 | Microsoft Internet Explorer 5/6 / Mozilla 1.2.1 - URI Display Obfuscation (1) | 9 Dec 200300:00 | – | exploitdb |
| Opera Browser 6.0 6 - URI Display Obfuscation | 23 Dec 200300:00 | – | exploitdb |
 | CVE-2003-1025 | 20 Jan 200405:00 | – | nvd |
 | IE 5.01 5.5 6.0 Cumulative patch (890923) | 3 Nov 200500:00 | – | openvas |
| Microsoft Internet Explorer 5.01, 5.5, 6.0 Cumulative Patch (890923, MS05-020) | 3 Nov 200500:00 | – | openvas |
 | Design/Logic Flaw | 29 Oct 200815:31 | – | prion |
 | Microsoft Security Bulletin MS04-004 | 3 Feb 200400:00 | – | securityvulns |
10
source: https://www.securityfocus.com/bid/9182/info
A weakness has been reported in multiple browsers that may allow attackers to obfuscate the URI for a visited page. The problem is said to occur when a URI designed to pass access a specific location with a supplied username, contains a hexadecimal 1 value prior to the @ symbol.
An attacker could exploit this issue by supplying a malicious URI pointing to a page designed to mimic that of a trusted site, and tricking a victim who follows a link into believing they are actually at the trusted location.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23423.zipData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Mar 2019 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.26912