Microsoft DNS Server WPAD Registration Spoofing (MS09-008; CVE-2009-0093)

WPAD feature enables web clients to automatically detect proxy settings without user intervention. A Web Proxy Auto-Discovery WPAD registration spoofing vulnerability has been reported in Microsoft DNS servers. The vulnerability is due to an error in the Windows DNS server that fails to correctly...

Security Best Practice: Adobe Flash Proxy Auto-Discovery DHCP Traffic Inspection

The Dynamic Host Configuration Protocol DHCP is a protocol used by networked devices to obtain the parameters necessary for operation in an Internet Protocol network. This protocol reduces system administration workload, allowing devices to be added to the network with little or no manual...

Microsoft Web Proxy Auto-Discovery代理欺骗漏洞

BUGTRAQ ID: 26686 CVE ID:CVE-2007-5355 CNCVE ID:CNCVE-20075355 Microsoft Web Proxy是一款支持WEB代理服务程序。 Microsoft Web Proxy Auto-Discovery存在设计问题，远程攻击者可以利用漏洞获得敏感信息对系统进行进一步攻击。 此漏洞影响Web Proxy Auto-Discovery WPAD，目前Microsoft没有接收到任何在公告场合利用此漏洞攻击客户的信息，根据调查，拥有第三级或更深级域名的“contoso.co.us”客户将受此漏洞影响。目前没有详细漏洞细节提供。...

CVE-2007-5355

The CVE describes a design/logic issue in Microsoft WPAD for Internet Explorer 6/7 where, if a primary DNS suffix has three or more components, unqualified wpad queries can resolve to a host in a deeper second-level domain outside the configured DNS zone, enabling potential MITM by remote WPAD se...

Compaq Client Management Agents 3.704.0 Insight Management Agents 4.21 A4.22 A4.30 A Intelligent Cluster Administrator 1.0 Management Agents for Workstations 4.20 A Server Management Agents 4.23 Survey Utility 2.0 - Web File Access

Compaq Client Management Agents 3.704.0 Insight Management Agents 4.21 A4.22 A4.30 A Intelligent Cluster Administrator 1.0 Management Agents for Workstations 4.20 A Server Management Agents 4.23 Survey Utility 2.0 - Web File Access source: https://www.securityfocus.com/bid/282/info A vulnerabilit...