Tor security advisory: DH handshake flaw

Versions affected: stable versions up through 0.1.0.13 and experimental versions up through 0.1.1.4-alpha. Impact: Tor clients can completely lose anonymity, confidentiality, and data integrity if the first Tor server in their path is malicious. Specifically, if the Tor client chooses a malicious...

tor -- diffie-hellman handshake flaw

A tor advisory reports Tor clients can completely loose anonymity, confidentiality, and data integrity if the first Tor server in their path is malicious. Specifically, if the Tor client chooses a malicious Tor server for her first hop in the circuit, that server can learn all the keys she...

FreeBSD : tor -- information disclosure (691ed622-e499-11d9-a8bd-000cf18bbe54)

Roger Dingledine reports : The Tor 0.1.0.10 release from a few days ago includes a fix for a bug that might allow an attacker to read arbitrary memory maybe even keys from an exit server's process space. We haven't heard any reports of exploits yet, but hey. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

DEBIAN-CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

CVE-2005-2050

The CVE-2005-2050 entry concerns Tor, where a memory disclosure vulnerability in the exit server’s process space could allow remote attackers to read arbitrary memory and potentially obtain key information. The description indicates this affects Tor before version 0.1.0.10. The connected sources ...

[Full-disclosure] [ GLSA 200506-18 ] Tor: Information disclosure

Gentoo Linux Security Advisory GLSA 200506-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200506-18 : Tor: Information disclosure

The remote host is affected by the vulnerability described in GLSA-200506-18 Tor: Information disclosure A bug in Tor allows attackers to view arbitrary memory contents from an exit server's process space. Impact : A remote attacker could exploit the memory disclosure to gain sensitive informatio...

Tor: Information disclosure

Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description A bug in Tor allows attackers to view arbitrary memory contents from an exit server's process space. Impact A remote attacker could exploit the memory...

tor -- information disclosure

Roger Dingledine reports: The Tor 0.1.0.10 release from a few days ago includes a fix for a bug that might allow an attacker to read arbitrary memory maybe even keys from an exit server's process space. We haven't heard any reports of exploits yet, but hey...

Tor Tunnel Detection

Binary data 2543.prm...

Tor Tunnel Detection

Binary data 2542.prm...

FreeBSD : tor -- remote DoS and loss of anonymity (195)

The following package needs to be updated: tor %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg8e2e6ad8172011d99fb900902788733b.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...

tor -- remote DoS and loss of anonymity

Tor has various remote crashes which could lead to a remote denial-of-service and be used to defeat clients anonymity. It is not expected that these vulnerabilities are exploitable for arbitrary code execution...