CVE-2005-2830

Description

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097

https://exchange.xforce.ibmcloud.com/vulnerabilities/23451

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054

http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420

http://www.vupen.com/english/advisories/2005/2909

http://www.vupen.com/english/advisories/2005/2867

http://www.securityfocus.com/bid/15825

http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf

http://securitytracker.com/id?1015350

http://secunia.com/advisories/18311

http://secunia.com/advisories/18064

http://secunia.com/advisories/15368

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3