Static Microsoft Windows WPAD entries might allow interception of traffic

Learn about the Static Microsoft Windows WPAD entries vulnerability and how it can expose users to remote attacks.

Chris Paget·Mar 26, 2007·1 min read

penetration testing

CVE-2007-1692. Disclosed: 03.26.07. The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries. A remote attacker could leverage this to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests.

READ TECHNICAL DETAILS – National Vulnerability Database READ TECHNICAL DETAILS – Common Vulnerabilities and Exposures

penetration testing

Want the research before the news cycle?

Get in touch