--- title: "CVE-2007-4174\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2007-4174?format=md keywords: index, follow --- # CVE-2007-4174 Publication date 7 August 2007 Last updated 24 July 2024 --- Ubuntu priority **Low** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | tor | 9.10 karmic | Not in release | | 9.04 jaunty | Not in release | | 8.10 intrepid | Not affected | | 8.04 LTS hardy | Not affected | | 7.10 gutsy | Not affected | | 7.04 feisty | Ignored end of life, was needed | | 6.10 edgy | Ignored end of life, was needed | | 6.06 LTS dapper | Ignored end of life | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4174) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-4174) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-4174) * [Debian](https://security-tracker.debian.org/tracker/CVE-2007-4174) ### Other references *