WebApp Sec: Re: unable to access web site embeds username & password

["Bill Curnow" <bill.curnow () pcca com>]

On 17 Jun 2004 at 21:31, OPTUSBYS wrote:

> I have discovered if I access my intranet that embeds the username and
> password, it will not work on workstations have the latest Microsoft
> security patches installed.
>
> http://username:password () webserver/website
Yup, February's "Cumulative Security Update for Internet Explorer 6 
(KB832894)", aka MS04-004, closed this hole (it was popular with 
phishers).
 
> Does anyone have a solution to this because I still don't know which
> security patch that inhibits the access. 
It was never RFC-compliant so don't look for it to come back.