Description
Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
References
- 18064 third-party-advisory
- MS05-054 vendor-advisory
- oval:org.mitre.oval:def:1101 vdb-entry signature
- 1015350 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
- 15368 third-party-advisory
- ADV-2005-2909 vdb-entry
- oval:org.mitre.oval:def:1097 vdb-entry signature
- oval:org.mitre.oval:def:1435 vdb-entry signature
- 18311 third-party-advisory
- ADV-2005-2867 vdb-entry
- oval:org.mitre.oval:def:1143 vdb-entry signature
- ie-https-proxy-information-disclosure(23451) vdb-entry
- 15825 vdb-entry
- oval:org.mitre.oval:def:1317 vdb-entry signature
- oval:org.mitre.oval:def:1521 vdb-entry signature
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420