Man-in-the-Middle Vulnerability in Microsoft Internet Explorer

CVE-2009-2069

Summary

Earlier versions of Microsoft Internet Explorer, specifically prior to version 8, are susceptible to a man-in-the-middle vulnerability. This occurs when the browser caches an SSL certificate from an arbitrary HTTPS site after initially accessing it through a proxy server. Subsequently, an attacker can exploit this by returning a 502 response page, which may allow them to present a crafted page to the user. This manipulation can result in the spoofing of legitimate websites, thereby compromising the confidentiality and integrity of user communications.

References