CVE-2007-6723
TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration...
TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration.
Exploit likelihood
What each source reports
NVD Score used
TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration.
- Record
CVE-2007-6723- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration.
- Record
CVE-2007-6723- Updated
- 2026-11-02
EUVDEUVD-2007-6686 No score
TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration.
- Record
EUVD-2007-6686- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5v2r-px42-wmpv No score
TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration...
TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration.
- Record
GHSA-5v2r-px42-wmpv- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6723 is a medium vulnerability (CVSS 4.3) in Anonymityanywhere Tork, published March 31, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 71st percentile. No source names a fixed version.
References
archives.seul.org/or/talk/Oct-2007/msg00291.html
sourceforge.net/project/shownotes.php?release_id=551544&group_id=159836
exchange.xforce.ibmcloud.com/vulnerabilities/42280
osvdb.org/48694
securityfocus.com/bid/26386
nvd.nist.gov/vuln/detail/CVE-2007-6723
github.com/advisories/GHSA-5v2r-px42-wmpv