$ cve CVE-2007-4174 JSON

CVE-2007-4174 EXPLOIT

5.8

MEDIUM · CVSS 2.0 · EPSS 6.2% (pctl 93)

Patch early

A public exploit exists.

Description

Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.

Scoring

CVSS	5.8 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS	6.21% — more likely to be exploited than 93% of all CVEs
Weakness	CWE-264
On CISA KEV	no
Public exploit	yes
Published	2007-08-07
Last modified	2026-06-16

Affected (1)

Vendor	Product
tor	tor

Public exploits

Source	Title	Date
exploit-db	Tor < 0.1.2.16 - ControlPort Remote Rewrite	2007-09-29
exploit-db	Tor 0.1.2.15 - ControlPort Missing Authentication Unauthorized Access	2007-08-02

References

→ the Explorer · watch your stack · NVD