vulnwire
7.5high

CVE-2001-0664in critical feed1 exploit

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
18.2%
percentile 97%
Public exploits
1
Exploit-DB

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."

Exploit prediction (EPSS)

18.19% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-21118 Microsoft Internet Explorer 5 - Zone Spoofing (MS01-055) · remote · 2001-10-10

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • morph3us.org /blog/?p=31 · x_refsource_MISC, x_transferred
  • marc.info /?l=bugtraq&m=100281551611595&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • osvdb.org /1971 · vdb-entry, x_refsource_OSVDB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/7258 · vdb-entry, x_refsource_XF, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2001/ms01-051 · vendor-advisory, x_refsource_MS, x_transferred
  • securityfocus.com /bid/3420 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.