PT-2005-5488 · Microsoft · Xmlhttprequest+1

Michal Zalewski · Publicado 2005-12-31 · Atualizado 2021-07-23 · CVE-2005-4827

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer version 6.0

Description The issue allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain. This is achieved by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name). This method is supported by some proxy servers that convert tabs to spaces, which can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.

Recommendations For Internet Explorer version 6.0, consider disabling the use of XMLHttpRequest objects until a patch is available. Restrict access to sensitive domains and resources to minimize the risk of exploitation. Avoid using the open method with unvalidated input in the method name argument.

Exploit

Correção

Identificadores relacionados

CVE-2005-4827

Produtos afetados

Internet Explorer

Xmlhttprequest

Referências · 5

• 🔥 http://securityfocus.com/archive/1/411585 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4827 · Nota de Segurança
• http://securityfocus.com/archive/1/459172/100/0/threaded · Nota
• http://seclists.org/fulldisclosure/2007/Feb/0081.html · Aviso do Fabricante
• http://securityfocus.com/bid/14969 · Nota