Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-1025
HistoryJan 20, 2004 - 5:00 a.m.

CVE-2003-1025

2004-01-2005:00:00
CWE-20
mitre
web.nvd.nist.gov
32
cve-2003-1025
internet explorer
url spoofing
vulnerability
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.4

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON

Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a “%01” character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the “Improper URL Canonicalization Vulnerability.”

Affected configurations

Nvd
Node
microsoftinternet_explorerMatch6.0
VendorProductVersionCPE
microsoftinternet_explorer6.0cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

References

Related

cvelist 2
exploitdb 3
checkpoint_advisories 1
nvd 2
cert 1
cve 1
prion 1
securityvulns 1
openvas 2
cvelist
cvelist
CVE-2003-1025
2004-01-06 05:00:00
CVE-2008-4787
2008-10-29 15:00:00
exploitdb
exploitdb
Opera Browser 6.0 6 - URI Display Obfuscation
2003-12-23 00:00:00
Microsoft Internet Explorer 5/6 / Mozilla 1.2.1 - URI Display Obfuscation (2)
2003-12-09 00:00:00
Microsoft Internet Explorer 5/6 / Mozilla 1.2.1 - URI Display Obfuscation (1)
2003-12-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Internet Explorer URL Spoofing (CVE-2003-1025)
2009-11-15 00:00:00
nvd
nvd
CVE-2003-1025
2004-01-20 05:00:00
CVE-2008-4787
2008-10-29 15:31:35
cert
cert
Microsoft Internet Explorer does not properly display URLs
2003-12-20 00:00:00
cve
cve
CVE-2008-4787
2008-10-29 15:31:35
prion
prion
Design/Logic Flaw
2008-10-29 15:31:00
securityvulns
securityvulns
Microsoft Security Bulletin MS04-004
2004-02-03 00:00:00
openvas
openvas
IE 5.01 5.5 6.0 Cumulative patch (890923)
2005-11-03 00:00:00
IE 5.01 5.5 6.0 Cumulative patch (890923)
2005-11-03 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.4

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON
Related for CVE-2003-1025
cvelist2exploitdb3checkpoint_advisories1nvd2cert1cve1prion1securityvulns1openvas2