CVE-2005-2830

Description (CNA)

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://secunia.com/advisories/18064
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101
• http://securitytracker.com/id?1015350
• http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
• http://secunia.com/advisories/15368
• http://www.vupen.com/english/advisories/2005/2909
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435
• http://secunia.com/advisories/18311
• http://www.vupen.com/english/advisories/2005/2867
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23451
• http://www.securityfocus.com/bid/15825
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521
• http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420

ADP enrichment