Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2000-0982

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2000-0982
Last Modified 05 Sep 2008 04:22:21
Published 19 Dec 2000 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2000-0982

Summary

Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.

Vulnerable Systems

Application

  • Microsoft Ie 4.0

  • Microsoft Ie 4.0.1

  • Microsoft Ie 4.1

  • Microsoft Ie 5.0

  • Microsoft Ie 5.01


References

XF - ie-cache-info

BID - 1793

MS - MS00-076

MISC - http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt


Last Updated: 27 May 2016 10:35:58