CVE-2013-2503
Privoxy < 3.0.21 - Proxy Authentication Spoofing via 407 Status Code
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-2503. PoCs published by Chris John Riley.
AI-analyzed exploit summary The provided text describes an information disclosure vulnerability in Privoxy 3.0.20, where attackers can exploit proxy authentication issues to gain access to sensitive information. The example includes HTTP request/response headers but lacks executable exploit code.
Description
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
Exploits (1)
The provided text describes an information disclosure vulnerability in Privoxy 3.0.20, where attackers can exploit proxy authentication issues to gain access to sensitive information. The example includes HTTP request/response headers but lacks executable exploit code.