CVE-2003-1559

Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.

Published: Dec 31, 2003
Updated: Apr 13, 2023
CVE: CVE-2003-1559
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
microsoft / ie	5.22	5.22.x
microsoft / internet_explorer	6-sp1	6-sp1.x
microsoft / internet_explorer	6	6.x
microsoft / internet_explorer	5.5	5.5.x

http://securityreason.com/securityalert/3989
http://www.gadgetopia.com/2003/12/23/OutlookWebAccessPrivacyHole.html
http://www.securityfocus.com/archive/1/348360
http://www.securityfocus.com/archive/1/348574
http://www.securityfocus.com/bid/9295

Vulnerability Database

CVE-2003-1559

Deep Security Visibility Without the Complexity