Description
Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
References
- 4004 third-party-advisory
- 20031230 RE: IE 5.22 on Mac Transmitting HTTP Referer from Secure Page mailing-list