Signature Detail
Short Name |
HTTP:STC:IE:SSL-PROXY-DIS |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Internet Explorer SSL Proxy Information Disclosure |
Release Date |
2005/12/13 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Internet Explorer SSL Proxy Information Disclosure
This signature detects attempts to exploit a known vulnerability against Internet Explorer. In certain situations, when a proxy server requires Basic Authentication, IE can disclose sensitive information. Attackers can take advantage of this information and gain access to authentication details sent to Web sites.
Extended Description
Microsoft Internet Explorer is prone to an information disclosure vulnerability when using an authenticating proxy server for HTTPS communications. Exploitation of this issue could result in an attacker gaining a user's authentication credentials. This issue only exists when the authenticating proxy uses Basic Authentication.
Affected Products
- Avaya DefinityOne Media Servers R10
- Avaya DefinityOne Media Servers R11
- Avaya DefinityOne Media Servers R12
- Avaya DefinityOne Media Servers R6
- Avaya DefinityOne Media Servers R7
- Avaya DefinityOne Media Servers R8
- Avaya DefinityOne Media Servers R9
- Avaya DefinityOne Media Servers
- Avaya IP600 Media Servers R10
- Avaya IP600 Media Servers R11
- Avaya IP600 Media Servers R12
- Avaya IP600 Media Servers R6
- Avaya IP600 Media Servers R7
- Avaya IP600 Media Servers R8
- Avaya IP600 Media Servers R9
- Avaya IP600 Media Servers
- Avaya Modular Messaging (MAS)
- Avaya S8100 Media Servers R10
- Avaya S8100 Media Servers R11
- Avaya S8100 Media Servers R12
- Avaya S8100 Media Servers R6
- Avaya S8100 Media Servers R7
- Avaya S8100 Media Servers R8
- Avaya S8100 Media Servers R9
- Avaya S8100 Media Servers
- Avaya Unified Communications Center S3400
- Microsoft Internet Explorer 5.0.1 SP4
- Microsoft Internet Explorer 5.5 SP2
- Microsoft Internet Explorer 6.0
- Microsoft Internet Explorer 6.0 SP1
References
- BugTraq: 15825
- CVE: CVE-2005-2830