CVE-2005-2830

Sažetak

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."

Reference

http://www.securityfocus.com/bid/15825
http://securitytracker.com/id?1015350
http://secunia.com/advisories/15368
http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
http://secunia.com/advisories/18064
http://secunia.com/advisories/18311
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
http://www.vupen.com/english/advisories/2005/2909
http://www.vupen.com/english/advisories/2005/2867
https://exchange.xforce.ibmcloud.com/vulnerabilities/23451
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054

CVSS

Base:	5.0
Impact:	2.9
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	NONE	NONE

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:N/A:N

Zadnje važnije ažuriranje

23-07-2021 - 12:55

Objavljeno

14-12-2005 - 11:03