CVE-2003-1560 Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape navigator | = 4 | No fix listed |
References
- 4004 third-party-advisory
- 20031230 RE: IE 5.22 on Mac Transmitting HTTP Referer from Secure Page mailing-list