PT-2005-3700 · Microsoft · Internet Explorer

Publicado 2005-12-14 · Atualizado 2021-07-23 · CVE-2005-2830

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01, 5.5, and 6

Description The issue allows remote attackers to obtain sensitive information when using an HTTPS proxy server that requires Basic Authentication, as URLs are sent in cleartext.

Recommendations For Microsoft Internet Explorer versions 5.01, 5.5, and 6, consider configuring the HTTPS proxy server to not require Basic Authentication, or use an alternative authentication method to minimize the risk of sensitive information exposure.

Correção

Identificadores relacionados

CVE-2005-2830

Produtos afetados

Internet Explorer

Referências · 18

• http://vupen.com/english/advisories/2005/2867 · Nota
• http://securitytracker.com/id?1015350 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23451 · Nota
• http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143 · Nota
• http://secunia.com/advisories/18064 · Nota
• http://secunia.com/advisories/18311 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097 · Nota
• http://securityfocus.com/bid/15825 · Correção
• http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2830 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317 · Nota
• http://vupen.com/english/advisories/2005/2909 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435 · Nota