2898 matches found
[Full-disclosure] ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vulnerabilities Technical Report September 2nd, 2006 CVE ID: CVE-2006-4508 OSVDB: 28276, 28277 SUMMARY ScatterChat http://www.scatterchat.com/ is an instant messaging project...
CVE-2006-4508
Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...
CVE-2006-4508
Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...
CVE-2006-4508
Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...
CVE-2006-4508
Vulnerability CVE-2006-4508 affects Tor 0.1.0.x (pre-0.1.0.18), Tor 0.1.1.x (pre-0.1.1.23), and ScatterChat
CVE-2006-4508
Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...
CVE-2006-4508
Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...
[SA21708] Tor Denial of Service and Traffic Routing
TITLE: Tor Denial of Service and Traffic Routing SECUNIA ADVISORY ID: SA21708 VERIFY ADVISORY: http://secunia.com/advisories/21708/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Tor 0.1.0.x http://secunia.com/product/5269/ Tor 0.1.1.x...
PT-2006-5308 · Tor · Tor
Name of the Vulnerable Software and Affected Versions: Tor versions 0.1.0.x through 0.1.0.17 Tor versions 0.1.1.x through 0.1.1.22 ScatterChat versions prior to 1.0.2 Description: The issue allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause ...
CVE-2006-3412
Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers...
CVE-2006-3418
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...
CVE-2006-3407
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters...
CVE-2006-3414
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution...
DEBIAN-CVE-2006-3410
Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks...
CVE-2006-3407
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters...
CVE-2006-3409
Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists...
CVE-2006-3408
Unspecified vulnerability in the directory server dirserver in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors...
CVE-2006-3410
Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks...
CVE-2006-3417
Tor client before 0.1.1.20 prefers entry points based on isfast or isstable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard" isguard systems by directory authorities...
CVE-2006-3418
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...