Microsoft has reported a flaw in the way Windows and Internet Explorer handle web proxy auto discover (WPAD) connections. WPAD servers are used to deliver connecting computers with web proxy information. Microsoft said that the problem occurs when the WPAD servers for third-level domains (such as .co.uk) and deeper cannot be found. The user is then redirected to a WPAD server for a higher domain.
This can eventually lead the user to access a WPAD server outside the intended domain, possibly to one that has been compromised by a hacker. All current versions of Windows and Internet Explorer are affected by the flaw, which was discovered by researcher Beau Butler. Microsoft has not received any reports of attacks targeting the vulnerability in the wild.
View: The full story @ vnunet
This can eventually lead the user to access a WPAD server outside the intended domain, possibly to one that has been compromised by a hacker. All current versions of Windows and Internet Explorer are affected by the flaw, which was discovered by researcher Beau Butler. Microsoft has not received any reports of attacks targeting the vulnerability in the wild.
View: The full story @ vnunet
But good to see that Microsoft has confirmed this, and is (presumably) working on a patch.
Someone didn't read the article. It clearly states "Internet Explorer and other browsers". This is something I may agree with, my firewall logs show lots of wpad requests even with Firefox as the enforced browser within the network.
Someone didn't read the article. It clearly states "Internet Explorer and other browsers". This is something I may agree with, my firewall logs show lots of wpad requests even with Firefox as the enforced browser within the network.
Someone needs to learn how to read. "other browsers" is a rather ambiguous statement. It's not very specific. If it said "all other browsers" or "other browsers including Firefox" then I might have thought that Firefox is affected. But it doesn't. Hence my venturing to guess that Firefox is unaffected. I'm assuming these "other browser" the article refers to are other IE-based browser (Maxathlon, et al.)
Oh, and EXCUSE ME for asking a question.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.