HTTP: Multiple Browser URI Display Obfuscation

This signature detects attempts to exploit a known vulnerability against Multiple Browsers. A successful attack could allow the attacker to obfuscate the URI for a visited page.

Extended Description

A weakness has been reported in multiple browsers that may allow attackers to obfuscate the URI for a visited page. The problem is said to occur when a URI designed to pass access a specific location with a supplied username, contains a hexadecimal 1 value prior to the @ symbol. An attacker could exploit this issue by supplying a malicious URI pointing to a page designed to mimic that of a trusted site, and tricking a victim who follows a link into believing they are actually at the trusted location.

Affected Products

Microsoft outlook_xp

References

BugTraq: 9182 9183

CVE: CVE-2003-1025

Short Name

HTTP:BROWSER:URI-OBFUSCATION

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Multiple Browser URI Display Obfuscation

Extended Description

Affected Products

References

Found a potential security threat?