Oval Definition:oval:org.mitre.oval:def:7611
Revision Date:2014-02-24Version:46
Title:IE v5.01,SP3 SSL Cached Content Vulnerability
Description:Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-0845
Platform(s):Microsoft Windows 2000
Product(s):Microsoft Internet Explorer
Definition Synopsis
  • Software section
  • Internet Explorer 5.01 Service Pack 3 is installed
  • AND the version of mshtml.dll is less than 5.0.3821.2800
  • AND NOT the patch kb834707-ie501sp3 is installed (Hotfix key)
  • AND Configuration section
  • Users not saving encrypted pages to disk (DisableCachingOfSSLPages)
  • BACK