First published: Thu Aug 01 2002(Updated: )
The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netscape Navigator | ||
Mozilla Mozilla | ||
Internet Explorer | =6.0.2900 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0815 has a severity rating that indicates a medium risk of exposure to sensitive data due to bypass of the Same Origin Policy.
To mitigate CVE-2002-0815, it's essential to update affected browsers to their latest versions that address this vulnerability.
CVE-2002-0815 affects Netscape Navigator, Mozilla, and Internet Explorer 6.0.2900.
The impact of CVE-2002-0815 allows remote web servers to access restricted HTTP and SOAP/XML content, potentially leading to data leaks.
Yes, there are known exploits for CVE-2002-0815 that demonstrate how an attacker can leverage this vulnerability for unauthorized data access.