CVE-2011-4894

Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections...

CVE-2011-2768

CVE-2011-2768 affects Tor before 0.2.2.34 when configured as a client or bridge. The vulnerability arises because Tor may send a TLS certificate chain as part of an outgoing OR connection, enabling remote relays to read the chain and infer the client’s entry guard set, thereby compromising anonym...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, builds circuits in a way that differs from client circuits, making it easier for remote attackers to enumerate bridges by observing circuit construction. Affects Tor code path used for bridges; vulnerability achieved through the bridge-circuit set...

CVE-2011-4894

Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections...

CVE-2011-2778

Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code by 1 establishing a SOCKS connection to SocksPort or 2 leveraging a SOCKS proxy configuration...

CVE-2011-2778

Tor vulnerability CVE-2011-2778 involves a heap-based buffer overflow in or/buffers.c that could allow remote code execution or memory corruption when using SocksPort or SOCKS proxy configuration. Affected product: Tor. Impact: remote attacker may cause memory corruption or execute arbitrary code...

CVE-2011-2769

Affected software: Tor prior to 0.2.2.34. Issue: When Tor is configured as a bridge, it accepts CREATE and CREATE_FAST in a cell’s Command field within an OR connection it initiated, enabling remote relays to enumerate bridges. Impact: Bridge enumeration could reveal bridge presence to adversarie...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-4897

CVE-2011-4897 : Affects Tor before 0.2.2.25-alpha when configured as a relay without the Nickname option; it uses the local hostname as the Nickname, exposing potentially sensitive information to remote readers. Connected advisories consistently describe the same behavior and impact. Some entries...

CVE-2011-4897

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...

Tor anonymity will become illegal with SOPA acts ?

Tor anonymity will become illegal with SOPA acts ? The Stop Online Piracy Act SOPA is the newest attempt by Congress and corporations in the United States to regulate the Internet. SOPA's proponents include the Motion Picture Association of America and the Recording Industry of America. They view...

Tor anonymity will become illegal with SOPA acts ?

Tor anonymity will become illegal with SOPA acts ? The Stop Online Piracy Act SOPA is the newest attempt by Congress and corporations in the United States to regulate the Internet. SOPA's proponents include the Motion Picture Association of America and the Recording Industry of America. They view...

[SECURITY] [DSA 2363-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2363-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 16, 2011 http://www.debian.org/security/faq -...

DSA-2363-1 tor - buffer overflow

Bulletin has no description...

BeEF 0.4.2.12 alpha Browser Exploitation Framework Released

BeEF 0.4.2.12 alpha Browser Exploitation Framework Released The Browser Exploitation Framework BeEF is a powerful professional security tool. BeEF is pioneering techniques that provide the experienced penetration tester with practical client side attack vectors. Unlike other security frameworks,...

Tor Project Sets Up Cloud Bridge Project on Amazon EC2

The Tor Project has started a new system designed to help people start and run Tor bridges in the cloud using Amazon’s EC2 platform. The Tor Cloud runs on Amazon’s new micro-instance tier that lets people run instances for free for the first year. Tor is used by people around the world to help...

Fedora 16 : tor-0.2.2.34-1600.fc16 (2011-15208)

. ---------------------------------------------------------------------- -----= Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 16 Update: tor-0.2.2.34-1600.fc16

Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...

Fedora Update for tor FEDORA-2011-15117

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for tor FEDORA-2011-15117

Check for the Version of tor OpenVAS Vulnerability Test Fedora Update for tor FEDORA-2011-15117 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...