Design/Logic Flaw

In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013...

Security fix for the ALT Linux 6 package tor version 0.2.1.30-alt1

June 24, 2011 Dmitry V. Levin 0.2.1.30-alt1 - Blindly updated 0.2.1.30 fixes numerous bugs including CVE-2011-0427. - Updated build dependencies...

Tor Directory Authority 'policy_summarize' Denial of Service Vulnerability (Windows)

This host is installed with Tor and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbtorpolicysummarizedoswin.nasl 7052 2017-09-04 11:50:51Z teissa $ Tor Directory Authority 'policysummarize' Denial of Service Vulnerability Windows Authors: N Shashi Kiran Copyright:...

Tor Clients Information Disclosure Vulnerability (win)

This host is installed with Tor and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodtorclientsinfodiscvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Tor Clients Information Disclosure Vulnerability win Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

Tor Denial Of Service Vulnerability - July09 (Linux)

This host is installed with Tor and is prone to Denial Of Service vulnerability. OpenVAS Vulnerability Test $Id: gbtordosvulnjul09lin.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor Denial Of Service Vulnerability - July09 Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Tor Denial Of Service Vulnerability - July09 (Windows)

This host is installed with Tor and is prone to Denial Of Service vulnerability. OpenVAS Vulnerability Test $Id: gbtordosvulnjul09win.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor Denial Of Service Vulnerability - July09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH...

Input validation

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...

Tor Replay Attack Vulnerability (Windows)

This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Replay Attack Vulnerability in Tor (Linux)

This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnlin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

CVE-2009-0654

Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and an exit router, to confirm that a sender and receiver are communicating via vectors involving 1 replaying, 2 modifying, 3 inserting, or 4 deleting a single cell, and then observing cell...

Tor Unspecified Remote Memory Corruption Vulnerability (Linux)

This host is installed with Tor and is prone to unspecified remote Memory Corruption vulnerability. OpenVAS Vulnerability Test $Id: gbtormemcrptnvulnlin.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor Unspecified Remote Memory Corruption Vulnerability Linux Authors: Sharath S Copyright: Copyright c...

Tor Unspecified Remote Memory Corruption Vulnerability (Windows)

This host is installed with Tor and is prone to unspecified remote Memory Corruption vulnerability. OpenVAS Vulnerability Test $Id: gbtormemcrptnvulnwin.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor Unspecified Remote Memory Corruption Vulnerability Windows Authors: Sharath S Copyright: Copyright c...

TOR Privilege Escalation Vulnerability (Windows)

This host is installed with TOR and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodtorprivilegeescalationwin.nasl 5370 2017-02-20 15:24:26Z cfi $ TOR Privilege Escalation Vulnerability Windows Authors: Sujit Ghosal Copyright c 2008 SecPod,...

CVE-2007-4174

Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid...

Code injection

Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications...

DEBIAN-CVE-2007-4098

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams...

DEBIAN-CVE-2007-3165

Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers...

CVE-2006-3407

Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters...

DEBIAN-CVE-2006-3414

Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution...

PT-2006-4307 · Tor · Tor

Name of the Vulnerable Software and Affected Versions: Tor versions prior to 0.1.1.20 Description: The issue causes Tor to kill the circuit when it receives an unrecognized relay command, leading to network circuits being disbanded. This is considered a self-DoS. Recommendations: For versions pri...