CVE-2003-1560

Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-200

Affected products

• Navigator (Netscape)

References

• http://securityreason.com/securityalert/4004
• http://www.securityfocus.com/archive/1/348574