Tor 'connection_ap_process_not_open()' Function Security Bypass Vulnerability
BID:64649
Info
Tor 'connection_ap_process_not_open()' Function Security Bypass Vulnerability
| Bugtraq ID: | 64649 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 14 2013 12:00AM |
| Updated: | Mar 14 2013 12:00AM |
| Credit: | nickm |
| Vulnerable: |
Tor Tor 0.2.4.11-alpha |
| Not Vulnerable: |
Tor Tor 0.2.4.12-alpha |
Discussion
Tor 'connection_ap_process_not_open()' Function Security Bypass Vulnerability
Tor is prone to a security-bypass vulnerability.
An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Tor 0.2.4.11-alpha is vulnerable; other versions may also be affected.
Tor is prone to a security-bypass vulnerability.
An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Tor 0.2.4.11-alpha is vulnerable; other versions may also be affected.
Exploit / POC
Tor 'connection_ap_process_not_open()' Function Security Bypass Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Tor 'connection_ap_process_not_open()' Function Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Tor 'connection_ap_process_not_open()' Function Security Bypass Vulnerability
References:
References: