Tor Unspecified Buffer Overflow, Denial of Service and Information Disclosure Vulnerabilities
BID:45832
Info
Tor Unspecified Buffer Overflow, Denial of Service and Information Disclosure Vulnerabilities
| Bugtraq ID: | 45832 |
| Class: | Unknown |
| CVE: |
CVE-2011-0015 CVE-2011-0016 CVE-2011-0427 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 17 2011 12:00AM |
| Updated: | May 07 2015 05:14PM |
| Credit: | debuger, doorss and cypherpunks. |
| Vulnerable: |
Tor Tor 0.2.1.28 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 |
| Not Vulnerable: |
Tor Tor 0.2.1.29 |
Discussion
Tor Unspecified Buffer Overflow, Denial of Service and Information Disclosure Vulnerabilities
Tor is prone to a heap-based buffer-overflow vulnerability, a denial-of-service vulnerability, and an information-disclosure vulnerability.
Attackers can exploit theses issues to execute arbitrary code within the context of the affected application, cause denial-of service conditions, or retrieve potentially sensitive information.
Tor is prone to a heap-based buffer-overflow vulnerability, a denial-of-service vulnerability, and an information-disclosure vulnerability.
Attackers can exploit theses issues to execute arbitrary code within the context of the affected application, cause denial-of service conditions, or retrieve potentially sensitive information.
Exploit / POC
Tor Unspecified Buffer Overflow, Denial of Service and Information Disclosure Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and not require specific exploit code.
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and not require specific exploit code.
Solution / Fix
Tor Unspecified Buffer Overflow, Denial of Service and Information Disclosure Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Tor Unspecified Buffer Overflow, Denial of Service and Information Disclosure Vulnerabilities
References:
References:
- Tor 0.2.1.29 is released (security patches) (Tor)
- Tor Homepage (Tor Project)