Tor Multiple Vulnerabilities And Information Disclosure Weaknesses
BID:25035
Info
Tor Multiple Vulnerabilities And Information Disclosure Weaknesses
| Bugtraq ID: | 25035 |
| Class: | Unknown |
| CVE: |
CVE-2007-4097 CVE-2007-4098 CVE-2007-4099 CVE-2007-4096 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 24 2007 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | lodger, croup and the vendor are credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Tor Tor 0.1.2 14 Tor Tor 0.1.1 23 Tor Tor 0.1.1 .5-alpha Tor Tor 0.1.1 .4-alpha Tor Tor 0.1.1 .3-alpha Tor Tor 0.1.1 .20 Tor Tor 0.1.1 .2-alpha Tor Tor 0.1.1 .1-alpha Tor Tor 0.1 18 Tor Tor 0.1 .0.14 Tor Tor 0.1 .0.13 Tor Tor 0.1 .0.12 Tor Tor 0.1 .0.11 Tor Tor 0.1 .0.10 Tor Tor 0.1.2.1 alpha-cvs |
| Not Vulnerable: |
Tor Tor 0.1.2.15 |
Discussion
Tor Multiple Vulnerabilities And Information Disclosure Weaknesses
Tor is prone to an information-disclosure weakness and multiple vulnerabilities, including a denial-of-service issue, a design error when handling streamids from different exits within the same circuit, and a design error when handling guard nodes.
An attacker can exploit these issues to crash the affected application, bypass certain security restrictions, and weaken the Tor anonymity, potentially allowing the attacker to gain access to sensitive information.
Tor is prone to an information-disclosure weakness and multiple vulnerabilities, including a denial-of-service issue, a design error when handling streamids from different exits within the same circuit, and a design error when handling guard nodes.
An attacker can exploit these issues to crash the affected application, bypass certain security restrictions, and weaken the Tor anonymity, potentially allowing the attacker to gain access to sensitive information.
Exploit / POC
Tor Multiple Vulnerabilities And Information Disclosure Weaknesses
An attacker can exploit some of these issues by using standard network utilities.
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
An attacker can exploit some of these issues by using standard network utilities.
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Tor Multiple Vulnerabilities And Information Disclosure Weaknesses
Solution:
The vendor released an update to address this issue. Please see the references for more information.
Solution:
The vendor released an update to address this issue. Please see the references for more information.
References
Tor Multiple Vulnerabilities And Information Disclosure Weaknesses
References:
References:
- Tor 0.1.2.15 Release Notes (Tor)
- Tor Homepage (Tor)