Command injection

2011-12-2303:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.1%

JSON

Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values.

CPENameOperatorVersion
toreq0.2.1.1.14
toreq0.2.1.10 alpha
toreq0.2.2.17 alpha
toreq0.1.1.6
toreq0.2.1.26
toreq0.1.1.2 alpha
toreq0.2.1.1.4 alpha
toreq0.2.1.1.1 alpha
toreq0.1.1.9
toreq0.0.6.2

Name	Operator	Version
tor	eq	0.2.1.1.14
tor	eq	0.2.1.10 alpha
tor	eq	0.2.2.17 alpha
tor	eq	0.1.1.6
tor	eq	0.2.1.26
tor	eq	0.1.1.2 alpha
tor	eq	0.2.1.1.4 alpha
tor	eq	0.2.1.1.1 alpha
tor	eq	0.1.1.9
tor	eq	0.0.6.2