Description
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
References
- 1194 vdb-entry
- 20000511 IE Domain Confusion Vulnerability is an Email problem also mailing-list
- MS00-033 vendor-advisory
- ie-cookie-disclosure(4447) vdb-entry
- 20000510 IE Domain Confusion Vulnerability mailing-list
- 1326 vdb-entry