CVE-2013-2503: Input Validation

First published: Mon Mar 11 2013(Updated: )

Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/author
• agent/severity
• agent/references
• agent/tags
• agent/weakness
• agent/description
• agent/event
• collector/mitre-cve
• source/MITRE
• vendor/privoxy
• canonical/privoxy privoxy
• version/privoxy privoxy/3.0.20
• version/privoxy privoxy/2.9.0-pre-alpha
• version/privoxy privoxy/2.9.1-pre-alpha
• version/privoxy privoxy/2.9.2-pre-alpha
• version/privoxy privoxy/2.9.3-pre-alpha
• version/privoxy privoxy/2.9.11-alpha
• version/privoxy privoxy/2.9.11-beta
• version/privoxy privoxy/2.9.11-pre-alpha
• version/privoxy privoxy/2.9.12-beta
• version/privoxy privoxy/2.9.13-beta
• version/privoxy privoxy/2.9.14-beta
• version/privoxy privoxy/2.9.16
• version/privoxy privoxy/2.9.18
• version/privoxy privoxy/3.0
• version/privoxy privoxy/3.0.2
• version/privoxy privoxy/3.0.3
• version/privoxy privoxy/3.0.5-beta
• version/privoxy privoxy/3.0.6
• version/privoxy privoxy/3.0.7-beta
• version/privoxy privoxy/3.0.8
• version/privoxy privoxy/3.0.9-beta
• version/privoxy privoxy/3.0.10
• version/privoxy privoxy/3.0.11
• version/privoxy privoxy/3.0.12
• version/privoxy privoxy/3.0.13-beta
• version/privoxy privoxy/3.0.14-beta
• version/privoxy privoxy/3.0.15-beta
• version/privoxy privoxy/3.0.16
• version/privoxy privoxy/3.0.17
• version/privoxy privoxy/3.0.18
• version/privoxy privoxy/3.0.19