PT-2003-2505 · Netscape · Netscape 4

Thor Larholm · Publicado 2003-12-31 · Atualizado 2009-01-29 · CVE-2003-1560

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netscape 4

Description The issue allows remote attackers to obtain potentially sensitive information by reading Referer log data, as Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs.

Recommendations For Netscape 4, consider disabling the sending of Referer headers or restricting access to Referer log data to minimize the risk of sensitive information disclosure.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2003-1560

Produtos afetados

Netscape 4

Referências · 3

• http://securityreason.com/securityalert/4004 · Nota
• http://securityfocus.com/archive/1/348574 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1560 · Nota de Segurança