Microsoft Web Proxy Auto-Discovery代理欺骗漏洞

BUGTRAQ ID: 26686
CVE ID:CVE-2007-5355
CNCVE ID:CNCVE-20075355
Microsoft Web Proxy是一款支持WEB代理服务程序。
Microsoft Web Proxy Auto-Discovery存在设计问题，远程攻击者可以利用漏洞获得敏感信息对系统进行进一步攻击。
此漏洞影响Web Proxy Auto-Discovery (WPAD)，目前Microsoft没有接收到任何在公告场合利用此漏洞攻击客户的信息，根据调查，拥有第三级或更深级域名的“contoso.co.us”客户将受此漏洞影响。目前没有详细漏洞细节提供。

Microsoft Windows XP Tablet PC Edition SP2
Microsoft Windows XP Tablet PC Edition SP1
Microsoft Windows XP Tablet PC Edition
Microsoft Windows XP Professional x64 Edition SP2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional SP2
Microsoft Windows XP Professional SP1
Microsoft Windows XP Professional
Microsoft Windows XP Media Center Edition SP2
Microsoft Windows XP Media Center Edition SP1
Microsoft Windows XP Media Center Edition
Microsoft Windows XP Home SP2
Microsoft Windows XP Home SP1
Microsoft Windows XP Home
Microsoft Windows XP 64-bit Edition Version 2003 SP1
Microsoft Windows XP 64-bit Edition SP1
Microsoft Windows XP 64-bit Edition
Microsoft Windows XP 0
Microsoft Windows Vista x64 Edition 0
Microsoft Windows Vista December CTP
Microsoft Windows Vista Ultimate
Microsoft Windows Vista Home Premium
Microsoft Windows Vista Home Basic
Microsoft Windows Vista Enterprise
Microsoft Windows Vista Business
Microsoft Windows Vista beta 2
Microsoft Windows Vista Beta 1
Microsoft Windows Vista Beta
Microsoft Windows Vista 0
Microsoft Windows Server 2003 x64 SP2
Microsoft Windows Server 2003 x64 SP1
Microsoft Windows Server 2003 Web Edition SP2
Microsoft Windows Server 2003 Web Edition SP1
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2003 Standard x64 Edition
Microsoft Windows Server 2003 Standard Edition SP2
Microsoft Windows Server 2003 Standard Edition SP1
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Itanium SP2
Microsoft Windows Server 2003 Itanium SP1
Microsoft Windows Server 2003 Itanium 0
Microsoft Windows Server 2003 Enterprise x64 Edition SP2
Microsoft Windows Server 2003 Enterprise x64 Edition
Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1
Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
Microsoft Windows Server 2003 Enterprise Edition Itanium 0
Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1
Microsoft Windows Server 2003 Enterprise Edition SP1
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Datacenter x64 Edition SP2
Microsoft Windows Server 2003 Datacenter x64 Edition
Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1
Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
Microsoft Windows Server 2003 Datacenter Edition Itanium 0
Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1
Microsoft Windows Server 2003 Datacenter Edition SP1
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows 2000 Server SP4
Microsoft Windows 2000 Server SP3
Microsoft Windows 2000 Server SP2
Microsoft Windows 2000 Server SP1
Microsoft Windows 2000 Server

• Avaya DefinityOne Media Servers
• Avaya IP600 Media Servers
• Avaya S3400 Message Application Server
• Avaya S8100 Media Servers
  Microsoft Windows 2000 Professional SP4
  Microsoft Windows 2000 Professional SP3
  Microsoft Windows 2000 Professional SP2
  Microsoft Windows 2000 Professional SP1
  Microsoft Windows 2000 Professional
  Microsoft Windows 2000 Datacenter Server SP4
  Microsoft Windows 2000 Datacenter Server SP3
  Microsoft Windows 2000 Datacenter Server SP2
  Microsoft Windows 2000 Datacenter Server SP1
  Microsoft Windows 2000 Datacenter Server
  Microsoft Windows 2000 Advanced Server SP4
  Microsoft Windows 2000 Advanced Server SP3
  Microsoft Windows 2000 Advanced Server SP2
  Microsoft Windows 2000 Advanced Server SP1
  Microsoft Windows 2000 Advanced Server
  Microsoft Internet Explorer 6.0 SP2
  Microsoft Internet Explorer 6.0 SP1
  Microsoft Internet Explorer 6.0

• Citrix ICA Client for Windows 4.0 SP6a
• Microsoft Windows 2000 Advanced Server SP2
• Microsoft Windows 2000 Advanced Server SP2
• Microsoft Windows 2000 Advanced Server SP1
• Microsoft Windows 2000 Advanced Server SP1
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server SP2
• Microsoft Windows 2000 Datacenter Server SP2
• Microsoft Windows 2000 Datacenter Server SP1
• Microsoft Windows 2000 Datacenter Server SP1
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Professional SP2
• Microsoft Windows 2000 Professional SP2
• Microsoft Windows 2000 Professional SP1
• Microsoft Windows 2000 Professional SP1
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Server SP2
• Microsoft Windows 2000 Server SP2
• Microsoft Windows 2000 Server SP1
• Microsoft Windows 2000 Server SP1
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Terminal Services SP2
• Microsoft Windows 2000 Terminal Services SP2
• Microsoft Windows 2000 Terminal Services SP1
• Microsoft Windows 2000 Terminal Services SP1
• Microsoft Windows 2000 Terminal Services
• Microsoft Windows 2000 Terminal Services
• Microsoft Windows 98
• Microsoft Windows 98
• Microsoft Windows 98SE
• Microsoft Windows 98SE
• Microsoft Windows ME
• Microsoft Windows ME
• Microsoft Windows NT 4.0 SP6a
• Microsoft Windows NT Enterprise Server 4.0 SP6a
• Microsoft Windows NT Enterprise Server 4.0 SP6a
• Microsoft Windows NT Server 4.0 SP6a
• Microsoft Windows NT Server 4.0 SP6a
• Microsoft Windows NT Workstation 4.0 SP6a
• Microsoft Windows NT Workstation 4.0 SP6a

• Microsoft Windows Server 2003 Datacenter Edition
• Microsoft Windows Server 2003 Datacenter Edition
• Microsoft Windows Server 2003 Datacenter Edition Itanium 0
• Microsoft Windows Server 2003 Enterprise Edition
• Microsoft Windows Server 2003 Enterprise Edition
• Microsoft Windows Server 2003 Enterprise Edition Itanium 0
• Microsoft Windows Server 2003 Enterprise Edition Itanium 0
• Microsoft Windows Server 2003 Standard Edition
• Microsoft Windows Server 2003 Standard Edition
• Microsoft Windows Server 2003 Web Edition
• Microsoft Windows Server 2003 Web Edition
• Microsoft Windows XP Home
• Microsoft Windows XP Home
• Microsoft Windows XP Professional
• Microsoft Windows XP Professional
  Microsoft Internet Explorer 5.0.1 SP4

• Microsoft Windows 2000 Advanced Server SP4
• Microsoft Windows 2000 Datacenter Server SP4
• Microsoft Windows 2000 Professional SP4
• Microsoft Windows 2000 Server SP4
  Microsoft Internet Explorer 5.0.1 SP3
  Microsoft Internet Explorer 5.0.1 SP2
• Citrix ICA Client for Windows 4.0 SP6a
• Microsoft Windows 2000 Advanced Server SP2
• Microsoft Windows 2000 Advanced Server SP2
• Microsoft Windows 2000 Advanced Server SP1
• Microsoft Windows 2000 Advanced Server SP1
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server SP2
• Microsoft Windows 2000 Datacenter Server SP2
• Microsoft Windows 2000 Datacenter Server SP1
• Microsoft Windows 2000 Datacenter Server SP1
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Professional SP2
• Microsoft Windows 2000 Professional SP2
• Microsoft Windows 2000 Professional SP1
• Microsoft Windows 2000 Professional SP1
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Server SP2
• Microsoft Windows 2000 Server SP2
• Microsoft Windows 2000 Server SP1
• Microsoft Windows 2000 Server SP1
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Terminal Services SP2
• Microsoft Windows 2000 Terminal Services SP2
• Microsoft Windows 2000 Terminal Services SP1
• Microsoft Windows 2000 Terminal Services SP1
• Microsoft Windows 2000 Terminal Services
• Microsoft Windows 2000 Terminal Services
• Microsoft Windows 95
• Microsoft Windows 95
• Microsoft Windows 98
• Microsoft Windows 98
• Microsoft Windows NT 4.0 SP6a
• Microsoft Windows NT 4.0 SP6
• Microsoft Windows NT 4.0 SP5
• Microsoft Windows NT 4.0 SP4
• Microsoft Windows NT 4.0 SP3
• Microsoft Windows NT Enterprise Server 4.0 SP6a
• Microsoft Windows NT Enterprise Server 4.0 SP6a
• Microsoft Windows NT Enterprise Server 4.0 SP6
• Microsoft Windows NT Enterprise Server 4.0 SP6
• Microsoft Windows NT Enterprise Server 4.0 SP5
• Microsoft Windows NT Enterprise Server 4.0 SP5
• Microsoft Windows NT Enterprise Server 4.0 SP4
• Microsoft Windows NT Enterprise Server 4.0 SP4
• Microsoft Windows NT Enterprise Server 4.0 SP3
• Microsoft Windows NT Enterprise Server 4.0 SP3
• Microsoft Windows NT Enterprise Server 4.0 SP2
• Microsoft Windows NT Enterprise Server 4.0 SP2
• Microsoft Windows NT Enterprise Server 4.0 SP1
• Microsoft Windows NT Enterprise Server 4.0 SP1
• Microsoft Windows NT Enterprise Server 4.0
• Microsoft Windows NT Enterprise Server 4.0
• Microsoft Windows NT Server 4.0 SP6a
• Microsoft Windows NT Server 4.0 SP6a
• Microsoft Windows NT Server 4.0 SP6
• Microsoft Windows NT Server 4.0 SP6
• Microsoft Windows NT Server 4.0 SP5
• Microsoft Windows NT Server 4.0 SP5
• Microsoft Windows NT Server 4.0 SP4
• Microsoft Windows NT Server 4.0 SP4
• Microsoft Windows NT Server 4.0 SP3
• Microsoft Windows NT Server 4.0 SP3
• Microsoft Windows NT Server 4.0 SP2
• Microsoft Windows NT Server 4.0 SP2
• Microsoft Windows NT Server 4.0 SP1
• Microsoft Windows NT Server 4.0 SP1
• Microsoft Windows NT Server 4.0
• Microsoft Windows NT Server 4.0
• Microsoft Windows NT Terminal Server 4.0 SP6
• Microsoft Windows NT Terminal Server 4.0 SP6
• Microsoft Windows NT Terminal Server 4.0 SP5
• Microsoft Windows NT Terminal Server 4.0 SP5
• Microsoft Windows NT Terminal Server 4.0 SP4
• Microsoft Windows NT Terminal Server 4.0 SP4
• Microsoft Windows NT Terminal Server 4.0 SP3
• Microsoft Windows NT Terminal Server 4.0 SP3
• Microsoft Windows NT Terminal Server 4.0 SP2
• Microsoft Windows NT Terminal Server 4.0 SP2
• Microsoft Windows NT Terminal Server 4.0 SP1
• Microsoft Windows NT Terminal Server 4.0 SP1
• Microsoft Windows NT Terminal Server 4.0
• Microsoft Windows NT Terminal Server 4.0
• Microsoft Windows NT Workstation 4.0 SP6a
• Microsoft Windows NT Workstation 4.0 SP6
• Microsoft Windows NT Workstation 4.0 SP6
• Microsoft Windows NT Workstation 4.0 SP5
• Microsoft Windows NT Workstation 4.0 SP5
• Microsoft Windows NT Workstation 4.0 SP4
• Microsoft Windows NT Workstation 4.0 SP4
• Microsoft Windows NT Workstation 4.0 SP3
• Microsoft Windows NT Workstation 4.0 SP3
• Microsoft Windows NT Workstation 4.0 SP2
• Microsoft Windows NT Workstation 4.0 SP2
• Microsoft Windows NT Workstation 4.0 SP1
• Microsoft Windows NT Workstation 4.0 SP1
• Microsoft Windows NT Workstation 4.0
• Microsoft Windows NT Workstation 4.0
  Microsoft Internet Explorer 5.0.1 SP1
• Citrix ICA Client for Windows 4.0 SP6a
• Microsoft Windows 2000 Advanced Server SP2
• Microsoft Windows 2000 Advanced Server SP2
• Microsoft Windows 2000 Advanced Server SP1
• Microsoft Windows 2000 Advanced Server SP1
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server SP2
• Microsoft Windows 2000 Datacenter Server SP2
• Microsoft Windows 2000 Datacenter Server SP1
• Microsoft Windows 2000 Datacenter Server SP1
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Professional SP2
• Microsoft Windows 2000 Professional SP2
• Microsoft Windows 2000 Professional SP1
• Microsoft Windows 2000 Professional SP1
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Server SP2
• Microsoft Windows 2000 Server SP2
• Microsoft Windows 2000 Server SP1
• Microsoft Windows 2000 Server SP1
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Terminal Services SP2
• Microsoft Windows 2000 Terminal Services SP2
• Microsoft Windows 2000 Terminal Services SP1
• Microsoft Windows 2000 Terminal Services SP1
• Microsoft Windows 2000 Terminal Services
• Microsoft Windows 2000 Terminal Services
• Microsoft Windows 95
• Microsoft Windows 95
• Microsoft Windows 98
• Microsoft Windows 98
• Microsoft Windows NT 4.0 SP6a
• Microsoft Windows NT 4.0 SP6
• Microsoft Windows NT 4.0 SP5
• Microsoft Windows NT 4.0 SP4
• Microsoft Windows NT 4.0 SP3
• Microsoft Windows NT Enterprise Server 4.0 SP6a
• Microsoft Windows NT Enterprise Server 4.0 SP6a
• Microsoft Windows NT Enterprise Server 4.0 SP6
• Microsoft Windows NT Enterprise Server 4.0 SP6
• Microsoft Windows NT Enterprise Server 4.0 SP5
• Microsoft Windows NT Enterprise Server 4.0 SP5
• Microsoft Windows NT Enterprise Server 4.0 SP4
• Microsoft Windows NT Enterprise Server 4.0 SP4
• Microsoft Windows NT Enterprise Server 4.0 SP3
• Microsoft Windows NT Enterprise Server 4.0 SP3
• Microsoft Windows NT Enterprise Server 4.0 SP2
• Microsoft Windows NT Enterprise Server 4.0 SP2
• Microsoft Windows NT Enterprise Server 4.0 SP1
• Microsoft Windows NT Enterprise Server 4.0 SP1
• Microsoft Windows NT Enterprise Server 4.0
• Microsoft Windows NT Enterprise Server 4.0
• Microsoft Windows NT Server 4.0 SP6a
• Microsoft Windows NT Server 4.0 SP6a
• Microsoft Windows NT Server 4.0 SP6
• Microsoft Windows NT Server 4.0 SP6
• Microsoft Windows NT Server 4.0 SP5
• Microsoft Windows NT Server 4.0 SP5
• Microsoft Windows NT Server 4.0 SP4
• Microsoft Windows NT Server 4.0 SP4
• Microsoft Windows NT Server 4.0 SP3
• Microsoft Windows NT Server 4.0 SP3
• Microsoft Windows NT Server 4.0 SP2
• Microsoft Windows NT Server 4.0 SP2
• Microsoft Windows NT Server 4.0 SP1
• Microsoft Windows NT Server 4.0 SP1
• Microsoft Windows NT Server 4.0
• Microsoft Windows NT Server 4.0
• Microsoft Windows NT Terminal Server 4.0 SP6
• Microsoft Windows NT Terminal Server 4.0 SP6
• Microsoft Windows NT Terminal Server 4.0 SP5
• Microsoft Windows NT Terminal Server 4.0 SP5
• Microsoft Windows NT Terminal Server 4.0 SP4
• Microsoft Windows NT Terminal Server 4.0 SP4
• Microsoft Windows NT Terminal Server 4.0 SP3
• Microsoft Windows NT Terminal Server 4.0 SP3
• Microsoft Windows NT Terminal Server 4.0 SP2
• Microsoft Windows NT Terminal Server 4.0 SP2
• Microsoft Windows NT Terminal Server 4.0 SP1
• Microsoft Windows NT Terminal Server 4.0 SP1
• Microsoft Windows NT Terminal Server 4.0
• Microsoft Windows NT Terminal Server 4.0
• Microsoft Windows NT Workstation 4.0 SP6a
• Microsoft Windows NT Workstation 4.0 SP6
• Microsoft Windows NT Workstation 4.0 SP6
• Microsoft Windows NT Workstation 4.0 SP5
• Microsoft Windows NT Workstation 4.0 SP5
• Microsoft Windows NT Workstation 4.0 SP4
• Microsoft Windows NT Workstation 4.0 SP4
• Microsoft Windows NT Workstation 4.0 SP3
• Microsoft Windows NT Workstation 4.0 SP3
• Microsoft Windows NT Workstation 4.0 SP2
• Microsoft Windows NT Workstation 4.0 SP2
• Microsoft Windows NT Workstation 4.0 SP1
• Microsoft Windows NT Workstation 4.0 SP1
• Microsoft Windows NT Workstation 4.0
• Microsoft Windows NT Workstation 4.0
  Microsoft Internet Explorer 5.0.1
  Microsoft Internet Explorer 7.0

• Microsoft Windows Vista Ultimate
• Microsoft Windows Vista Ultimate
• Microsoft Windows Vista Ultimate
• Microsoft Windows Vista Home Premium
• Microsoft Windows Vista Home Premium
• Microsoft Windows Vista Home Premium
• Microsoft Windows Vista Home Basic
• Microsoft Windows Vista Home Basic
• Microsoft Windows Vista Home Basic
• Microsoft Windows Vista Enterprise
• Microsoft Windows Vista Enterprise
• Microsoft Windows Vista Enterprise
• Microsoft Windows Vista Business
• Microsoft Windows Vista Business
• Microsoft Windows Vista Business
• Microsoft Windows Vista 0
• Microsoft Windows Vista 0
• Microsoft Windows Vista 0
• Microsoft Windows Vista 0
  3DM Software Disk Management Software SP2
  3DM Software Disk Management Software SP1

目前没有详细解决方案提供：
<a href=“http://www.microsoft.com/” target=“_blank”>http://www.microsoft.com/</a>