3029 matches found
Fedora Update for tor FEDORA-2010-19159
Check for the Version of tor OpenVAS Vulnerability Test Fedora Update for tor FEDORA-2010-19159 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Debian DSA-2136-1 : tor - buffer overflow
Willem Pinckaers discovered that Tor, a tool to enable online anonymity, does not correctly handle all data read from the network. By supplying specially crafted packets a remote attacker can cause Tor to overflow its heap, crashing the process. Arbitrary code execution has not been confirmed but...
Privacy Flaw Found in Tor Project !
At the Chaos Computer Club Congress here Tuesday, researchers from the University of Regensburg delivered a new warning about the Tor anonymizer network, a system aimed at hiding details of a computer user's online activity from spying eyes. The attack doesn't quite make a surfer's activity an op...
Fedora 13 : tor-0.2.1.28-1300.fc13 (2010-19159)
Major bugfixes : - Fix a remotely exploitable bug that could be used to crash instances of Tor remotely by overflowing on the heap. Remote-code execution hasn't been confirmed, but can't be ruled out. Everyone should upgrade. CVE-2010-1676 Directory authority changes : - Change IP address and por...
Fedora 14 : tor-0.2.1.28-1400.fc14 (2010-19147)
Major bugfixes : - Fix a remotely exploitable bug that could be used to crash instances of Tor remotely by overflowing on the heap. Remote-code execution hasn't been confirmed, but can't be ruled out. Everyone should upgrade. CVE-2010-1676 Directory authority changes : - Change IP address and por...
[SECURITY] Fedora 14 Update: tor-0.2.1.28-1400.fc14
Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...
[BSA-014] New Tor packages fix potential code execution
Willem Pinckaers discovered that Tor, a tool to enable online anonymity, does not correctly handle all data read from the network. By supplying specially crafted packets a remote attacker can cause Tor to overflow its heap, crashing the process in turn. Arbitrary code execution has not been...
[SECURITY] [DSA-2136-1] New tor packages fix potential code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2136-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 21, 2010 http://www.debian.org/security/faq -...
tor buffer overflow
Buffer overflow on request parsing...
FreeBSD : tor -- remote crash and potential remote code execution (4bd33bc5-0cd6-11e0-bfa4-001676740879)
The Tor Project reports : Remotely exploitable bug that could be used to crash instances of Tor remotely by overflowing on the heap. Remote-code execution hasn't been confirmed, but can't be ruled out. Everyone should upgrade. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...
CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...
DEBIAN-CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...
Heap overflow
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...
CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...
[SECURITY] [DSA-2136-1] New tor packages fix potential code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-2136-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 21, 2010 http://www.debian.org/security/faq -...
CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...
CVE-2010-1676
Tor is affected by a heap-based buffer overflow (CVE-2010-1676) that exists in versions prior to 0.2.1.28 and in 0.2.2.x prior to 0.2.2.20-alpha. The vulnerability targets the Tor process and can cause a daemon crash or potentially allow remote execution of arbitrary code via unspecified vectors....
CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...