Tor Hostile Traffic Routing and Denial of Service Vulnerabilities

Bugtraq ID:	19785
Class:	Unknown
CVE:	CVE-2006-4508
Remote:	Yes
Local:	No
Published:	Aug 31 2006 12:00AM
Updated:	Sep 04 2006 12:48PM
Credit:	The vendor disclosed this information.
Vulnerable:	Tor Tor 0.1.1 .20 Tor Tor 0.1.1 .2-alpha Tor Tor 0.1 .0.14 Tor Tor 0.1 .0.13 Tor Tor 0.1 .0.12 Tor Tor 0.1 .0.11 Tor Tor 0.1 .0.10 Tor Tor 0.1.2.1 alpha-cvs ScatterChat ScatterChat 1.0
Not Vulnerable:	Tor Tor 0.1.1 23 Tor Tor 0.1 18 ScatterChat ScatterChat 1.0.2

Tor Hostile Traffic Routing and Denial of Service Vulnerabilities

Tor is prone to a hostile traffic routing and denial of service vulnerability; updates are available.

A remote attacker could exploit this vulnerability to reroute traffic through a vulnerable Tor node, or cause a denial of service condition. The exact nature of these vulnerabilities has not been reported. This BID will be updated as more details become available.

This issue affects all versions of the 0.1.0.x series prior to 0.1.0.18, and all versions of the 0.1.1.x series prior to 0.1.1.23. Snapshot 0.1.2.1-alpha-cvs is also affected.

Tor Hostile Traffic Routing and Denial of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Tor Hostile Traffic Routing and Denial of Service Vulnerabilities

Solution:
The vendor has released an advisory and updates to addresses these issues. Please see the references for additional information.

Tor Hostile Traffic Routing and Denial of Service Vulnerabilities

References:

• ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vu (ScatterChat)
  
• Tor Homepage (Tor)
  
• Tor security advisory: clients will route traffic (Roger Dingledine)