CVE-2007-4174 Missing authorization in n/a
Remote attackers can modify Tor configuration and compromise anonymity via unauthenticated HTTP POST requests when ControlPort is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2007-4174?
CVE-2007-4174 is a medium-severity missing authorization vulnerability in Tor Tor, published on 7 Aug 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.
Weakness: CWE-264
Which versions are affected by CVE-2007-4174?
It affects 1 product.
Products include Tor Tor.
How do I fix CVE-2007-4174?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2007-4174 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-4174 exists.
Public exploit code: 2 Exploit-DB entries.
Other vulnerabilities in Tor Tor
- CVE-2010-1676 Memory corruption in n/a
- CVE-2009-0939 Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as
- CVE-2009-0414 Memory corruption in n/a
- CVE-2008-5398 Information disclosure in n/a
- CVE-2011-2778 Memory corruption in n/a
Sources
Also known as DEBIAN-CVE-2007-4174, GHSA-qprc-v4xr-fwgr.