CVE-2013-2503
EPSS 4.6%
描述
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
如何修補 CVE-2013-2503
要修補 CVE-2013-2503,請將受影響套件升級到下列已修補版本。
- Debian/privoxy—升級至 3.0.21-1 或更新版本
CVE-2013-2503 正在被利用嗎?
低 — EPSS 為 4.6%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 3.0.21-1