Tor Security Bypass And Privilege Escalation Weaknesses

Bugtraq ID:	32648
Class:	Unknown
CVE:	CVE-2008-5397 CVE-2008-5398
Remote:	Yes
Local:	Yes
Published:	Dec 04 2008 12:00AM
Updated:	Apr 09 2009 09:06PM
Credit:	Tor, Theo de Raadt
Vulnerable:	Tor Tor 0.2 .31 Gentoo Linux
Not Vulnerable:	Tor Tor 0.2 .32

Tor Security Bypass And Privilege Escalation Weaknesses

Tor is prone to multiple weaknesses that may allow attackers to exploit other vulnerabilities that facilitate privilege-escalation and security-bypass attacks.

These issues affect versions prior to Tor 0.2.0.32.

Tor Security Bypass And Privilege Escalation Weaknesses

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Tor Security Bypass And Privilege Escalation Weaknesses

Solution:
Updates are available. Please see the references for more information.


Tor Tor 0.2 .31

• Tor tor-0.2.0.32.tar.gz
  https://www.torproject.org/dist/tor-0.2.0.32.tar.gz

Tor Security Bypass And Privilege Escalation Weaknesses

References:

• Tor 0.2.0.32 Released (Tor)
  
• Tor Homepage (Tor Project)