PT-2006-4304 · Privoxy Developers+2 · Privoxy+2

Published 2006-07-07 · Updated 2008-09-05 · CVE-2006-3413

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.1.1.20

Description The issue allows attackers to obtain potentially sensitive information due to the logging of all data via the "logfile" in the privoxy configuration file when run on Apple OS X.

Recommendations For versions prior to 0.1.1.20, update to version 0.1.1.20 or later to resolve the issue. As a temporary workaround, consider disabling the logging feature in the privoxy configuration file to minimize the risk of sensitive information disclosure.

Fix

Related Identifiers

CVE-2006-3413

Affected Products

Os X

Privoxy

Tor

References · 8

• https://osv.dev/vulnerability/DEBIAN-CVE-2006-3413 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-3413 · Vendor Advisory
• http://secunia.com/advisories/20514 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-3413 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3413 · Security Note
• http://security.gentoo.org/glsa/glsa-200606-04.xml · Vendor Advisory
• http://osvdb.org/25875 · Note
• http://tor.eff.org/cvs/tor/ChangeLog · Note