Security Advisory

CVE-2013-2503

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-03-11 17:00:00
Last updated 2024-08-06 15:44:32
Assigner mitre
State PUBLISHED

Description

Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.