Vulnerability in Apple Mac Os X
CVE-2007-6722
Vidalia bundle before 0.1.2.18, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration.
EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Microsoft Windows
- Vidalia-project Vidalia_bundle
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_MLIST, Exploit)
- cve@mitre.org (vdb-entry, x_refsource_XF)