CVE-2002-1186 Information

Description

Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information aka \Encoded Characters Information Disclosure.\

Reference

http://archives.neohapsis.com/archives/bugtraq/2002-09/0018.html http://archives.neohapsis.com/archives/bugtraq/2002-09/0030.html http://www.iss.net/security_center/static/10039.php http://www.osvdb.org/7845 http://www.securityfocus.com/bid/5610 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A143 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A471 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A495