Unscored CVE-2007-6724 EUVD-2007-6687GHSA-27xv-9p99-hj75

Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an…

Published Mar 31, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration.

References

[or-talk] 20071031 Insecure Privoxy Configuration in Vidalia Bundles Prior to 0.1.2.18 mailing-list
vidalia-enableremotehttptoggle-sec-bypass(50474) vdb-entry