Oval Definition:
oval:org.mitre.oval:def:1317
Revision Date
:
2014-02-24
Version
:
47
Title
:
Server 2003 HTTPS Proxy Vulnerability
Description
:
Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2005-2830
Platform(s)
:
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s)
:
Microsoft Internet Explorer
Definition Synopsis
Windows Server 2003 is installed
AND
Internet Explorer 6 is installed
AND
the version of mshtml.dll is less than 6.0.3790.449
AND
NOT
Win2K/XP/2003 is patched
BACK