CVE-1999-0858: Medium severity Microsoft Internet Explorer vulnerability
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable WPAD / automatic proxy detection in Internet Explorer's LAN/proxy settings to prevent proxy configuration changes via a malicious WPAD server.
Internet Explorer Web Proxy Auto-Discovery (WPAD) / automatic proxy detection = disabled - Compensating control
Block or restrict WPAD servers and WPAD responses on the network using network controls (firewall, ACLs, or equivalent) to prevent clients from receiving proxy configuration from untrusted WPAD servers.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0858?
CVE-1999-0858 has a severity rating of medium due to its potential to manipulate proxy settings.
How do I fix CVE-1999-0858?
To fix CVE-1999-0858, it is recommended to upgrade Internet Explorer to a later version or apply relevant security patches.
What type of attack is described in CVE-1999-0858?
CVE-1999-0858 describes a remote code execution attack that targets Internet Explorer's proxy configuration via a malicious WPAD server.
Which version of Internet Explorer is affected by CVE-1999-0858?
CVE-1999-0858 specifically affects Internet Explorer version 5.0.
What can be exploited through CVE-1999-0858?
CVE-1999-0858 can be exploited to redirect a user's network traffic by modifying the proxy configuration.