CVE-2003-1559

State: Published
Severity: Not scored
Published: Jul 14, 2008
Updated: Aug 8, 2024
Reserved: Jul 14, 2008

Description

Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20031230 RE: IE 5.22 on Mac Transmitting HTTP Referer from Secure Pagemailing-list
http://www.gadgetopia.com/2003/12/23/OutlookWebAccessPrivacyHole.html
9295vdb-entry
20031224 IE 5.22 on Mac Transmitting HTTP Referer from Secure Pagemailing-list
3989third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.