Lucene search
HistoryMar 11, 2013 - 5:55 p.m.
CVE-2013-2503
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
7.3
Confidence
High
EPSS
0.014
Percentile
86.6%
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
Affected configurations
Node
privoxyprivoxyRange≤3.0.20beta
ORprivoxyprivoxyMatch2.9.0pre-alpha
ORprivoxyprivoxyMatch2.9.1pre-alpha
ORprivoxyprivoxyMatch2.9.2pre-alpha
ORprivoxyprivoxyMatch2.9.3pre-alpha
ORprivoxyprivoxyMatch2.9.11alpha
ORprivoxyprivoxyMatch2.9.11beta
ORprivoxyprivoxyMatch2.9.11pre-alpha
ORprivoxyprivoxyMatch2.9.12beta
ORprivoxyprivoxyMatch2.9.13beta
ORprivoxyprivoxyMatch2.9.14beta
ORprivoxyprivoxyMatch2.9.16
ORprivoxyprivoxyMatch2.9.18
ORprivoxyprivoxyMatch3.0
ORprivoxyprivoxyMatch3.0.2
ORprivoxyprivoxyMatch3.0.3
ORprivoxyprivoxyMatch3.0.5beta
ORprivoxyprivoxyMatch3.0.6
ORprivoxyprivoxyMatch3.0.7beta
ORprivoxyprivoxyMatch3.0.8
ORprivoxyprivoxyMatch3.0.9beta
ORprivoxyprivoxyMatch3.0.10
ORprivoxyprivoxyMatch3.0.11
ORprivoxyprivoxyMatch3.0.12
ORprivoxyprivoxyMatch3.0.13beta
ORprivoxyprivoxyMatch3.0.14beta
ORprivoxyprivoxyMatch3.0.15beta
ORprivoxyprivoxyMatch3.0.16
ORprivoxyprivoxyMatch3.0.17
ORprivoxyprivoxyMatch3.0.18
ORprivoxyprivoxyMatch3.0.19
| Vendor | Product | Version | CPE |
|---|---|---|---|
| privoxy | privoxy | * | cpe:2.3:a:privoxy:privoxy:*:beta:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.0 | cpe:2.3:a:privoxy:privoxy:2.9.0:pre-alpha:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.1 | cpe:2.3:a:privoxy:privoxy:2.9.1:pre-alpha:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.2 | cpe:2.3:a:privoxy:privoxy:2.9.2:pre-alpha:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.3 | cpe:2.3:a:privoxy:privoxy:2.9.3:pre-alpha:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.11 | cpe:2.3:a:privoxy:privoxy:2.9.11:alpha:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.11 | cpe:2.3:a:privoxy:privoxy:2.9.11:beta:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.11 | cpe:2.3:a:privoxy:privoxy:2.9.11:pre-alpha:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.12 | cpe:2.3:a:privoxy:privoxy:2.9.12:beta:*:*:*:*:*:* |
| privoxy | privoxy | 2.9.13 | cpe:2.3:a:privoxy:privoxy:2.9.13:beta:*:*:*:*:*:* |
Related
prion
prion
Code injection
2013-03-11 17:55:00
packetstorm
packetstorm
Privoxy 3.0.20-1 Credential Exposure
2013-03-11 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: privoxy-3.0.21-1.fc18
2013-03-22 00:39:23
[SECURITY] Fedora 17 Update: privoxy-3.0.21-1.fc17
2013-03-22 00:33:57
exploitdb
exploitdb
Privoxy Proxy - Authentication Information Disclosure
2013-03-11 00:00:00
debiancve
debiancve
CVE-2013-2503
2013-03-11 17:55:01
nessus
nessus
Fedora 18 : privoxy-3.0.21-1.fc18 (2013-3753)
2013-03-22 00:00:00
Fedora 17 : privoxy-3.0.21-1.fc17 (2013-3756)
2013-03-22 00:00:00
ubuntucve
ubuntucve
CVE-2013-2503
2013-03-11 00:00:00
openvas
openvas
Fedora Update for privoxy FEDORA-2013-3753
2013-03-22 00:00:00
Fedora Update for privoxy FEDORA-2013-3753
2013-03-22 00:00:00
Fedora Update for privoxy FEDORA-2013-3756
2013-03-22 00:00:00
securityvulns
securityvulns
Privoxy information leakage
2013-03-13 00:00:00
Privoxy Proxy Authentication Credential Exposure - CVE-2013-2503
2013-03-13 00:00:00
cvelist
cvelist
CVE-2013-2503
2013-03-11 17:00:00
freebsd
freebsd
privoxy -- malicious server spoofing as proxy vulnerability
2013-03-07 00:00:00
cve
cve
CVE-2013-2503
2013-03-11 17:55:01
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
7.3
Confidence
High
EPSS
0.014
Percentile
86.6%
Related for NVD:CVE-2013-2503