CVE-1999-0891
Internet Explorer 5 - Arbitrary File Read via Server-Side Redirect
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-0891. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit leverages the DHTML Behaviors feature in Internet Explorer 5.0 to bypass security restrictions and read local files or files in other security zones via HTTP redirect manipulation. The PoC demonstrates how a malicious website can force an IE5 client to retrieve and display the contents of a local file (e.g., C:\AUTOEXEC.BAT) by exploiting the '#default#download' behavior.
Description
The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
Exploits (1)
This exploit leverages the DHTML Behaviors feature in Internet Explorer 5.0 to bypass security restrictions and read local files or files in other security zones via HTTP redirect manipulation. The PoC demonstrates how a malicious website can force an IE5 client to retrieve and display the contents of a local file (e.g., C:\AUTOEXEC.BAT) by exploiting the '#default#download' behavior.