Signature Detail
Short Name |
HTTP:STC:IE:CACHE-EXTERNAL |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
ie cache window |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Internet Explorer Cache External
This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer (IE). IE 5.5 and 6.0 are vulnerable; IE 5 SP2 and 6.0 SP1 are not vulnerable. IE does not confirm that multiple open browser windows are operating in the proper security zones; attackers can obtain sensitive information from the host cache.
Extended Description
Successful exploitation of this vulnerability would allow remote attackers to view files on the Web server, steal cookies, deface web page, and execute arbitrary commands with the privileges of the logged in user.
References