Information disclosure

2009-03-3117:30:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.3%

JSON

Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration.

CPENameOperatorVersion
vidalia_bundlele0.1.2.17

CPE	Name	Operator	Version
	vidalia_bundle	le	0.1.2.17

References

archives.seul.org/or/talk/Oct-2007/msg00291.html

exchange.xforce.ibmcloud.com/vulnerabilities/50474