Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:00
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/15368 - | |
References | () http://secunia.com/advisories/18064 - | |
References | () http://secunia.com/advisories/18311 - | |
References | () http://securitytracker.com/id?1015350 - | |
References | () http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf - | |
References | () http://www.securityfocus.com/bid/15825 - Patch | |
References | () http://www.vupen.com/english/advisories/2005/2867 - | |
References | () http://www.vupen.com/english/advisories/2005/2909 - | |
References | () http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 - | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/23451 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521 - |
Information
Published : 2005-12-14 11:03
Updated : 2024-11-21 00:00
NVD link : CVE-2005-2830
Mitre link : CVE-2005-2830
CVE.ORG link : CVE-2005-2830
JSON object : View
Products Affected
microsoft
- ie
- internet_explorer
CWE