CVE-2003-0513: High severity Microsoft ie vulnerability
Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0513?
CVE-2003-0513 is classified as a moderate severity vulnerability.
How do I fix CVE-2003-0513?
To fix CVE-2003-0513, update Microsoft Internet Explorer to the latest supported version.
What systems are affected by CVE-2003-0513?
CVE-2003-0513 affects Microsoft Internet Explorer versions 5.0.1, 5.5, and 6.0.
What types of attacks does CVE-2003-0513 enable?
CVE-2003-0513 allows remote attackers to bypass cookie access restrictions, potentially exposing sensitive data.
Can CVE-2003-0513 be exploited without user interaction?
Yes, CVE-2003-0513 can be exploited without requiring any user interaction.