Privoxy RFC 3986 HTTP Response Splitting Vulnerability
BID:50768
Info
Privoxy RFC 3986 HTTP Response Splitting Vulnerability
| Bugtraq ID: | 50768 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 22 2011 12:00AM |
| Updated: | Nov 22 2011 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Privoxy Privoxy 3.0.17 Privoxy Privoxy 3.0.5 |
| Not Vulnerable: |
Privoxy Privoxy 3.0.18 |
Discussion
Privoxy RFC 3986 HTTP Response Splitting Vulnerability
Privoxy is prone to an HTTP-response-splitting vulnerability.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that entice client users into a false sense of trust.
Privoxy 3.0.5 to 3.0.17 are vulnerable; other versions may also be affected.
Privoxy is prone to an HTTP-response-splitting vulnerability.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that entice client users into a false sense of trust.
Privoxy 3.0.5 to 3.0.17 are vulnerable; other versions may also be affected.
Exploit / POC
Privoxy RFC 3986 HTTP Response Splitting Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Privoxy RFC 3986 HTTP Response Splitting Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Privoxy RFC 3986 HTTP Response Splitting Vulnerability
References:
References:
- Privoxy Homepage (Privoxy)
- Announcing Privoxy v.3.0.18 stable (Privoxy)