PT-2005-3700 · Microsoft · Internet Explorer

Published 2005-12-14 · Updated 2021-07-23 · CVE-2005-2830

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01, 5.5, and 6

Description The issue allows remote attackers to obtain sensitive information when using an HTTPS proxy server that requires Basic Authentication, as URLs are sent in cleartext.

Recommendations For Microsoft Internet Explorer versions 5.01, 5.5, and 6, consider configuring the HTTPS proxy server to not require Basic Authentication, or use an alternative authentication method to minimize the risk of sensitive information exposure.

Fix

Related Identifiers

CVE-2005-2830

Affected Products

Internet Explorer

References · 18

• http://securityfocus.com/bid/15825 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2830 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2867 · Note
• http://securitytracker.com/id?1015350 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23451 · Note
• http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143 · Note
• http://secunia.com/advisories/18064 · Note
• http://secunia.com/advisories/18311 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317 · Note
• http://vupen.com/english/advisories/2005/2909 · Note