Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS01-027 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Flaws in Web Server Certificate Validation Could Enable Spoofing |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1096 | |||
| Oval ID: | oval:org.mitre.oval:def:1096 | ||
| Title: | IE Web Page Spoofing Vulnerability | ||
| Description: | Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2001-0339 | Version: | 3 |
| Platform(s): | Microsoft Windows 98 Microsoft Windows ME Microsoft Windows NT Microsoft Windows 2000 | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2005-11-03 | Name : IE 5.01 5.5 6.0 Cumulative patch (890923) File : nvt/smb_nt_ms02-005.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 59501 | Microsoft IE MSScriptControl.ScriptControl / GetObject Frame Domain Validatio... |
| 7859 | Microsoft IE Frame Domain Verification Arbitrary File Access |
| 5694 | Microsoft IE Address Bar URL Spoofing Microsoft Internet Explorer has an issue that may allow a web site to display an arbitrary URL in the address bar different to the one actually being visited. This would allow a malicious site to spoof the contents of a legitimate site in an attempt to steal sensitive data from users. This can take place within a SSL session to further add to the legimacy of the spoof. |
| 1831 | Microsoft IE Server Certificate Validation Failure |
