Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rxph-92gh-ccv4

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.

Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.

EPSS

Процентиль: 93%
0.11463
Средний

Связанные уязвимости

nvd
больше 18 лет назад

Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.

EPSS

Процентиль: 93%
0.11463
Средний