CVE ID:	CVE-2003-1025
Description:	Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1025 Bugtraq: 20031209 Internet Explorer URL parsing vulnerability (Google Search) http://www.securityfocus.com/archive/1/346948 Cert/CC Advisory: TA04-033A http://www.us-cert.gov/cas/techalerts/TA04-033A.html CERT/CC vulnerability note: VU#652278 http://www.kb.cert.org/vuls/id/652278 http://www.zapthedingbat.com/security/ex01/vun1.htm Microsoft Security Bulletin: MS04-004 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A490 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A491 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A510 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A511 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A512 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A513 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A526 XForce ISS Database: ie-domain-url-spoofing(13935) https://exchange.xforce.ibmcloud.com/vulnerabilities/13935