Lucene search
HistoryMar 31, 2009 - 5:30 p.m.
CVE-2007-6724
cve-2007-6724
vidalia bundle
privoxy
windows
configuration file
remote attackers
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.3%
Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration.
Affected configurations
Node
vidalia-projectvidalia_bundleRange≤0.1.2.17
microsoftwindows
| CPE | Name | Operator | Version |
|---|---|---|---|
| vidalia-project:vidalia_bundle | vidalia-project vidalia bundle | le | 0.1.2.17 |
Related
cvelist
cvelist
CVE-2007-6724
2009-03-31 17:00:00
prion
prion
Information disclosure
2009-03-31 17:30:00
nvd
nvd
CVE-2007-6724
2009-03-31 17:30:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.3%
Related for CVE-2007-6724