CVE-2006-3410

CVE-2006-3410 affects Tor prior to 0.1.1.20. The vulnerability stems from how the client builds internal circuits, consisting mainly of nodes with “useful exit nodes,” which could enable remote attackers to perform unspecified statistical attacks and impact confidentiality. Documented impact from...

CVE-2006-3408

Unspecified vulnerability in the directory server dirserver in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors...

CVE-2006-3408

Unspecified vulnerability in the directory server dirserver in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors...

CVE-2006-3412

Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers...

CVE-2006-3416

Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the "Security fixes" section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS...

CVE-2006-3409

Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists...

CVE-2006-3410

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks...

GLSA-200606-04 : Tor: Several vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200606-04 Tor: Several vulnerabilities Some integer overflows exist when adding elements to the smartlists. Non-printable characters received from the network are not properly sanitised before being logged. There are additional...

Tor: Several vulnerabilities

Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Some integer overflows exist when adding elements to the smartlists. Non-printable characters received from the network are not properly sanitised before...

[SA20277] Tor Weakness and Multiple Vulnerabilities

TITLE: Tor Weakness and Multiple Vulnerabilities SECUNIA ADVISORY ID: SA20277 VERIFY ADVISORY: http://secunia.com/advisories/20277/ CRITICAL: Moderately critical IMPACT: WHERE: From remote SOFTWARE: Tor 0.1.0.x http://secunia.com/product/5269/ DESCRIPTION: Some vulnerabilities and a weakness have...

FreeBSD : tor -- diffie-hellman handshake flaw (5fde5c30-0f4e-11da-bc01-000e0c2e438a)

A tor advisory reports Tor clients can completely loose anonymity, confidentiality, and data integrity if the first Tor server in their path is malicious. Specifically, if the Tor client chooses a malicious Tor server for her first hop in the circuit, that server can learn all the keys she...

FreeBSD : tor -- malicious tor server can locate a hidden service (d38e1810-9ef7-11da-b410-000e0c2e438a)

Roger Dingledine reports : If you offer a Tor hidden service, an adversary who can run a fast Tor server and who knows some basic statistics can find the location of your hidden service in a matter of minutes to hours. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

To shadowless go without a trace anonymous breakthrough network limit-vulnerability warning-the black bar safety net

Network management as the name suggests, is every pipe of the network, and tried various means to restrict our Internet access people. In the network established all sorts of rules, don't download, don't use IM, not allowed to access the restricted site, etc., so we can't enjoy the Internet bring...

Design/Logic Flaw

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server...

CVE-2006-0414

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server...

CVE-2006-0414

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server...

DEBIAN-CVE-2006-0414

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server...

CVE-2006-0414

The CVE-2006-0414 issue is a vulnerability in Tor where remote attackers can identify hidden services by sending a high rate of requests, causing circuit construction through the attacker’s server. Affected: Tor before 0.1.1.20. Impact: potential exposure of the hidden service’s address; risk is ...

CVE-2006-0414

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server...

CVE-2006-0414

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server...