Executive Summary

Informations
Name CVE-2005-2830 First vendor Publication 2005-12-14
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2830

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:1097
 
Oval ID: oval:org.mitre.oval:def:1097
Title: Win2K/XP,SP1 HTTPS Proxy Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2005-2830
 Version: 7
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1101
 
Oval ID: oval:org.mitre.oval:def:1101
Title: WinXP,SP1 (64-bit) HTTPS Proxy Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2005-2830
 Version: 7
Platform(s): Microsoft Windows XP
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1143
 
Oval ID: oval:org.mitre.oval:def:1143
Title: Server 2003,SP1 HTTPS Proxy Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2005-2830
 Version: 7
Platform(s): Microsoft Windows Server 2003
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1317
 
Oval ID: oval:org.mitre.oval:def:1317
Title: Server 2003 HTTPS Proxy Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2005-2830
 Version: 7
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1435
 
Oval ID: oval:org.mitre.oval:def:1435
Title: WinXP,SP2 HTTPS Proxy Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2005-2830
 Version: 8
Platform(s): Microsoft Windows XP
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1521
 
Oval ID: oval:org.mitre.oval:def:1521
Title: Win2K,SP4 HTTPS Proxy Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2005-2830
 Version: 8
Platform(s): Microsoft Windows 2000
 Product(s): Microsoft Internet Explorer
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Application 3

ExploitDB Exploits

id Description
2012-01-14 Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution V...

Open Source Vulnerability Database (OSVDB)

Id Description
21762 Microsoft IE HTTPS Proxy Basic Authentication URL Cleartext Transmission

Snort® IPS/IDS

Date Description
2014-01-10 Microsoft Internet Explorer javascript onload prompt obfuscation overflow att...
RuleID : 4917 - Revision : 16 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer javascript onload document.write obfuscation over...
RuleID : 4916 - Revision : 15 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer Shortcut Handler ActiveX object access
RuleID : 4915 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Script Definition ActiveX object access
RuleID : 4914 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Workspace ActiveX object access
RuleID : 4913 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Root ActiveX object access
RuleID : 4912 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Type Library ActiveX object access
RuleID : 4911 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Relationship Definition ActiveX object...
RuleID : 4910 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Property Definition ActiveX object access
RuleID : 4909 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Method Definition ActiveX object access
RuleID : 4908 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Collection Definition ActiveX object a...
RuleID : 4907 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Interface Definition ActiveX object ac...
RuleID : 4906 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Object ActiveX object access
RuleID : 4905 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Alias ActiveX object access
RuleID : 4904 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer VMR ImageSync 9 ActiveX object access
RuleID : 4903 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Video Mixing Renderer 9 ActiveX object access
RuleID : 4902 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer VMR Allocator Presenter 9 ActiveX object access
RuleID : 4901 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Outlook Progress Ctl ActiveX object access
RuleID : 4900 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer ISupportErrorInfo Interface ActiveX object access
RuleID : 4899 - Revision : 17 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSTypeComp ActiveX object access
RuleID : 4898 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSOAInterface ActiveX object access
RuleID : 4897 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSTypeLib ActiveX object access
RuleID : 4896 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSTypeInfo ActiveX object access
RuleID : 4895 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSEnumVariant ActiveX object access
RuleID : 4894 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Trident HTMLEditor ActiveX object access
RuleID : 4893 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer MTSEvents Class ActiveX object access
RuleID : 4892 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer cfw Class ActiveX object access
RuleID : 4891 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer IAVIStream & IAVIFile Proxy ActiveX object ac...
RuleID : 4890 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer javascript onload overflow attempt
RuleID : 4647 - Revision : 17 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer File Download Dialog Box Manipulation
RuleID : 17463 - Revision : 13 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer HTTPS proxy information disclosure vulnerability
RuleID : 17448 - Revision : 11 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer Address ActiveX clsid access
RuleID : 11252 - Revision : 13 - Type : BROWSER-PLUGINS
2014-01-10 Sony Rootkit Uninstaller ActiveX clsid unicode access
RuleID : 11251 - Revision : 6 - Type : WEB-ACTIVEX
2014-01-10 Sony Rootkit Uninstaller ActiveX clsid access
RuleID : 11250 - Revision : 12 - Type : BROWSER-PLUGINS
2014-01-10 IE Address ActiveX clsid unicode access
RuleID : 11249 - Revision : 7 - Type : WEB-ACTIVEX

Nessus® Vulnerability Scanner

Date Description
2006-02-14 Name : Arbitrary code can be executed on the remote host through the web client.
File : smb_nt_ms06-004.nasl - Type : ACT_GATHER_INFO
2005-12-13 Name : Arbitrary code can be executed on the remote host through the web client.
File : smb_nt_ms05-054.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://secunia.com/advisories/15368
http://secunia.com/advisories/18064
http://secunia.com/advisories/18311
http://securitytracker.com/id?1015350
http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
http://www.securityfocus.com/bid/15825
http://www.vupen.com/english/advisories/2005/2867
http://www.vupen.com/english/advisories/2005/2909
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&a...
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05...
https://exchange.xforce.ibmcloud.com/vulnerabilities/23451
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
Date Informations
2024-11-28 23:21:28
  • Multiple Updates
2024-11-28 12:07:24
  • Multiple Updates
2021-07-27 00:24:36
  • Multiple Updates
2021-07-24 01:44:14
  • Multiple Updates
2021-07-24 01:02:04
  • Multiple Updates
2021-07-23 17:24:40
  • Multiple Updates
2021-07-23 01:44:02
  • Multiple Updates
2021-07-23 01:02:02
  • Multiple Updates
2021-07-22 21:24:58
  • Multiple Updates
2021-05-04 12:03:09
  • Multiple Updates
2021-04-22 01:03:26
  • Multiple Updates
2020-05-23 00:16:48
  • Multiple Updates
2018-10-13 00:22:32
  • Multiple Updates
2017-10-11 09:23:34
  • Multiple Updates
2017-07-11 12:02:00
  • Multiple Updates
2016-04-26 13:47:20
  • Multiple Updates
2014-02-17 10:32:47
  • Multiple Updates
2014-01-19 21:22:53
  • Multiple Updates
2013-05-11 11:31:07
  • Multiple Updates