oval:org.mitre.oval:def:3872

Definition Id: oval:org.mitre.oval:def:3872

Oval ID:	oval:org.mitre.oval:def:3872
Title:	IE v6.0,SP1 (Server 2003) SSL Cached Content Vulnerability
Description:	Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2004-0845	Version:	7
Platform(s):	Microsoft Windows Server 2003	Product(s):	Microsoft Internet Explorer
Definition Synopsis:
Software section Internet Explorer 6 for Windows Server 2003 is installed AND the version of mshtml.dll is less than 6.0.3790.219 AND NOT the patch kb834707 is installed (Hotfix key) AND Configuration section Users not saving encrypted pages to disk (DisableCachingOfSSLPages)