PT-2006-4304 · Privoxy Developers+2 · Privoxy+2

Publicado 2006-07-07 · Atualizado 2008-09-05 · CVE-2006-3413

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.1.1.20

Description The issue allows attackers to obtain potentially sensitive information due to the logging of all data via the "logfile" in the privoxy configuration file when run on Apple OS X.

Recommendations For versions prior to 0.1.1.20, update to version 0.1.1.20 or later to resolve the issue. As a temporary workaround, consider disabling the logging feature in the privoxy configuration file to minimize the risk of sensitive information disclosure.

Correção

Identificadores relacionados

CVE-2006-3413

Produtos afetados

Os X

Privoxy

Tor

Referências · 8

• https://osv.dev/vulnerability/DEBIAN-CVE-2006-3413 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2006-3413 · Aviso do Fabricante
• http://secunia.com/advisories/20514 · Aviso do Fabricante
• http://osvdb.org/25875 · Nota
• http://tor.eff.org/cvs/tor/ChangeLog · Nota
• https://osv.dev/vulnerability/CVE-2006-3413 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-3413 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-200606-04.xml · Aviso do Fabricante