CVE-2003-1028

CVE-2003-1028 describes a vulnerability in Internet Explorer 6 SP1 where a remote attacker could discover the browser's cache directory name. By sending a specially crafted HTTP response with an invalid ContentType and a .htm file, an attacker could bypass security mechanisms relying on randomized directory names. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and could lead to information disclosure (C:P) without requiring authentication (Au:N) or complex attack conditions (AC:L). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.