CVE-2007-4174

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 6.2%

from disclosure to weapon0 days

Published on NVDAug 7

1st PoCAug 2

exploitation probability

6.2%top 7% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30447 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4468

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://archives.seul.org/or/announce/Aug-2007/msg00000.html http://archives.seul.org/or/announce/Sep-2007/msg00000.html http://osvdb.org/36271 http://secunia.com/advisories/26301 https://exchange.xforce.ibmcloud.com/vulnerabilities/35784 https://exchange.xforce.ibmcloud.com/vulnerabilities/36407 http://www.securityfocus.com/bid/25188 http://www.securitytracker.com/id?1018510 http://www.vupen.com/english/advisories/2007/2768