WPAD Name Collision Vulnerability

ronjor · May 23, 2016

Original release date: May 23, 2016

Systems Affected
Windows, OS X, Linux systems, and web browsers with WPAD enabled
Overview

Description
WPAD is a protocol used to ensure all systems in an organization utilize the same web proxy configuration. Instead of individually modifying configurations on each device connected to a network, WPAD locates a proxy configuration file and applies the configuration automatically.

The use of WPAD is enabled by default on all Microsoft Windows operating systems and Internet Explorer browsers. WPAD is supported but not enabled by default on Mac and Linux-based operating systems, as well as, Safari, Chrome, and Firefox browsers.
Click to expand...

https://www.us-cert.gov/ncas/alerts/TA16-144A

ronjor · Jun 1, 2016

WPAD Name Collision Vulnerability
Original release date: May 23, 2016 | Last revised: June 01, 2016

Revisions

May 23, 2016: Initial Release
June 1, 2016: Added information on using TLDs restricted from registration with the gTLD program
Click to expand...

https://www.us-cert.gov/ncas/alerts/TA16-144A

Log in or Sign up

WPAD Name Collision Vulnerability

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

WPAD Name Collision Vulnerability

ronjor Global Moderator

ronjor Global Moderator

Useful Searches