CVE-2013-2503 in Privoxy
Summary
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
03/07/2013
Disclosure
03/11/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7947 | Privoxy Proxy-Authentication Header input validation | 20 | Proof-of-Concept | Official fix | CVE-2013-2503 |