Tor Directory Remote Information Disclosure Vulnerability Bridge Enumeration Weaknesses
BID:50414
Info
Tor Directory Remote Information Disclosure Vulnerability Bridge Enumeration Weaknesses
| Bugtraq ID: | 50414 |
| Class: | Design Error |
| CVE: |
CVE-2011-2768 CVE-2011-2769 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 28 2011 12:00AM |
| Updated: | May 07 2015 05:17PM |
| Credit: | frosty_un |
| Vulnerable: |
Tor Tor 0.2.2 .21-alpha Tor Tor 0.2.2 .20-alpha Tor Tor 0.2.2 .19-alpha Tor Tor 0.2.2 .18-alpha Tor Tor 0.2.2 .17-alpha Tor Tor 0.2.2 .16-alpha Tor Tor 0.2.2 .15-alpha Tor Tor 0.2.2 .14-alpha Tor Tor 0.2.2 Tor Tor 0.2 .35 Tor Tor 0.2 .34 Tor Tor 0.2 .33 Tor Tor 0.2 .32 Tor Tor 0.2 .31 Tor Tor 0.1.2 14 Tor Tor 0.1.1 23 Tor Tor 0.1.1 .5-alpha Tor Tor 0.1.1 .4-alpha Tor Tor 0.1.1 .3-alpha Tor Tor 0.1.1 .20 Tor Tor 0.1.1 .2-alpha Tor Tor 0.1.1 .1-alpha Tor Tor 0.1 18 Tor Tor 0.1 .0.14 Tor Tor 0.1 .0.13 Tor Tor 0.1 .0.12 Tor Tor 0.1 .0.11 Tor Tor 0.1 .0.10 Tor Tor 0.0.9 .9 Tor Tor 0.0.9 .8 Tor Tor 0.0.9 .7 Tor Tor 0.0.9 .6 Tor Tor 0.0.9 .5 Tor Tor 0.0.9 .4 Tor Tor 0.0.9 .3 Tor Tor 0.0.9 .2 Tor Tor 0.0.9 .10 Tor Tor 0.0.9 .1 Tor Tor 0.0.9 Tor Tor 0.2.1.21 Tor Tor 0.2.1.20 Tor Tor 0.1.2.16 Tor Tor 0.1.2.15 Tor Tor 0.1.2.1 alpha-cvs Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Tor Tor 0.2.2.34 |
Discussion
Tor Directory Remote Information Disclosure Vulnerability Bridge Enumeration Weaknesses
Tor is prone to a remote information-disclosure vulnerability and a bridge enumeration weakness.
Exploits will allow attackers to obtain sensitive information that can help them launch further attacks.
Versions prior to Tor 0.2.2.34 are vulnerable.
Tor is prone to a remote information-disclosure vulnerability and a bridge enumeration weakness.
Exploits will allow attackers to obtain sensitive information that can help them launch further attacks.
Versions prior to Tor 0.2.2.34 are vulnerable.
Exploit / POC
Tor Directory Remote Information Disclosure Vulnerability Bridge Enumeration Weaknesses
Attackers can use readily available tools to exploit these issues.
Attackers can use readily available tools to exploit these issues.
Solution / Fix
Tor Directory Remote Information Disclosure Vulnerability Bridge Enumeration Weaknesses
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Tor Directory Remote Information Disclosure Vulnerability Bridge Enumeration Weaknesses
References:
References:
- Tor 0.2.2.34 is released (security patches) (Tor)
- Tor Homepage (Tor Project)