Description
Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.
References
- oval:org.mitre.oval:def:2219 vdb-entry signature
- oval:org.mitre.oval:def:5150 vdb-entry signature
- ie-cache-ssl-obtain-information(17654) vdb-entry
- oval:org.mitre.oval:def:5740 vdb-entry signature
- MS04-038 vendor-advisory
- oval:org.mitre.oval:def:5520 vdb-entry signature
- oval:org.mitre.oval:def:3872 vdb-entry signature
- 20041013 ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer mailing-list
- TA04-293A third-party-advisory
- ie-ms04038-patch(17651) vdb-entry
- VU#795720 third-party-advisory
- http://www.acrossecurity.com/aspr/ASPR-2004-10-13-1-PUB.txt
- oval:org.mitre.oval:def:7611 vdb-entry signature