WebApp Sec mailing list archives

Re: unable to access web site embeds username & password


From: "Keith W. McCammon" <keith-list () mccammon org>
Date: Mon, 21 Jun 2004 12:53:44 -0400

Here's the offending patch:

http://www.microsoft.com/technet/security/bulletin/MS04-004.mspx

You can remove it, or you can Google for work-arounds, which seem to be available, but are obviously unsupported and may cause some residual security issues.

OPTUSBYS wrote:
Dear all,

I have discovered if I access my intranet that embeds the username and
password, it will not work on workstations have the latest Microsoft
security patches installed.

http://username:password@webserver/website


Does anyone have a solution to this because I still don't know which
security patch that inhibits the access.
On the other hand, I don't really want to leave my workstations unprotected
too.


Thanks for your contribution.

Much appreciated.


Regards,
Seeker.






Current thread: