CVE-2013-2503: Input Validation
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2503?
CVE-2013-2503 is considered a moderate severity vulnerability due to its potential to allow proxy authentication spoofing.
How do I fix CVE-2013-2503?
To fix CVE-2013-2503, you should upgrade to Privoxy version 3.0.21 or later.
What versions of Privoxy are affected by CVE-2013-2503?
CVE-2013-2503 affects Privoxy versions prior to 3.0.21, including all beta and pre-alpha releases.
What is the impact of CVE-2013-2503?
The impact of CVE-2013-2503 allows remote HTTP servers to spoof the intended proxy service, potentially leading to unauthorized access.
Is CVE-2013-2503 related to proxy authentication?
Yes, CVE-2013-2503 specifically involves improper handling of Proxy-Authenticate and Proxy-Authorization headers.