3024 matches found
Tor拒绝服务及DNS欺骗漏洞
BUGTRAQ ID: 35505 Tor（The Onion Router）是第二代洋葱路由的一种实现，用户通过Tor可以在因特网上进行匿名交流。 Tor在解析某些畸形的路由器描述符时可能出现崩溃的情况；此外src/or/relay.c文件中的 connectionedgeprocessrelaycellnotopen函数中的错误可能允许恶意的出口中继将客户端的DNS请求解析为内部IP地址，这有助于DNS欺骗攻击。 Tor 0.2.0.x 厂商补丁： Tor --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
FreeBSD : tor-devel -- DNS resolution vulnerability (f59dda75-5ff4-11de-a13e-00e0815b8da8)
The Tor Project reports : A malicious exit relay could convince a controller that the client's DNS question resolves to an internal IP address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databas...
tor-devel -- DNS resolution vulnerability
The Tor Project reports: A malicious exit relay could convince a controller that the client's DNS question resolves to an internal IP address...
Encrypted tunnels enable users to circumvent security controls
In the previous article, I talked a bit about how employees are using external proxies to hide web activity from the prying eyes of the IT department. This article discusses the use of encrypted tunnel applications to hide from detection. To someone like myself an admitted web 1.2 kinda guy, usin...
FreeBSD : tor -- remote DoS and loss of anonymity (8e2e6ad8-1720-11d9-9fb9-00902788733b)
Tor has various remote crashes which could lead to a remote denial-of-service and be used to defeat clients anonymity. It is not expected that these vulnerabilities are exploitable for arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Fedora 10 : tor-0.2.0.33-1.fc10 (2009-0917)
New upstream release 0.2.0.33, with lots of bug fixes and one security fix: https://blog.torproject.org/blog/tor-0.2.0.33-stable-released Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Gentoo Security Advisory GLSA 200904-11 (tor)
The remote host is missing updates announced in advisory GLSA 200904-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200904-11 (tor)
The remote host is missing updates announced in advisory GLSA 200904-11. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
GLSA-200904-11 : Tor: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200904-11 Tor: Multiple vulnerabilities Theo de Raadt reported that the application does not properly drop privileges to the primary groups of the user specified via the 'User' configuration option CVE-2008-5397. rovv reported tha...
Tor: Multiple vulnerabilities
Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Theo de Raadt reported that the application does not properly drop privileges to the primary groups of the user specified via the "User" configuration optio...
DEBIAN-CVE-2009-0939
Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...
DEBIAN-CVE-2009-0937
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...
CVE-2009-0937
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...
DEBIAN-CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...
CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...
CVE-2009-0939
Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...
CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...
CVE-2009-0937
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...