Published: 20/01/2004 Updated: 23/07/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Internet Explorer 5.01 through 6 SP1 allows remote malicious users to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet explorer 6.0

source: wwwsecurityfocuscom/bid/9182/info A weakness has been reported in multiple browsers that may allow attackers to obfuscate the URI for a visited page The problem is said to occur when a URI designed to pass access a specific location with a supplied username, contains a hexadecimal 1 value prior to the @ symbol An attacker cou ...

source: wwwsecurityfocuscom/bid/9281/info A weakness has been reported in Opera that may allow attackers to obfuscate the URI for a visited page The problem is said to occur when a URI that is designed to access a specific location with a supplied username, contains a specially crafted sequence of characters These characters will be int ...

source: wwwsecurityfocuscom/bid/9182/info A weakness has been reported in multiple browsers that may allow attackers to obfuscate the URI for a visited page The problem is said to occur when a URI designed to pass access a specific location with a supplied username, contains a hexadecimal 1 value prior to the @ symbol An attacker could ...

CWE-20 http://www.securityfocus.com/archive/1/346948 http://www.zapthedingbat.com/security/ex01/vun1.htm http://www.kb.cert.org/vuls/id/652278 http://www.us-cert.gov/cas/techalerts/TA04-033A.html https://exchange.xforce.ibmcloud.com/vulnerabilities/13935 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A526 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A513 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A512 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A511 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A510 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A491 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A490 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004 https://nvd.nist.gov https://www.exploit-db.com/exploits/23423/https://www.kb.cert.org/vuls/id/652278

CVE-2003-1025

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect