| Package | Affected versions | Patched versions |
|---|---|---|
| privoxy | = 2.9.0= 2.9.1= 2.9.11= 2.9.12= 2.9.13= 2.9.14= 2.9.16= 2.9.18= 2.9.2= 2.9.3= 3.0= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.3= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9≤ 3.0.20 |
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free