DEBIAN-CVE-2011-1924

Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...

Buffer overflow

Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...

Tor "policy_summarize()"目录管理拒绝服务漏洞

BUGTRAQ ID: 46618 Tor 是第二代洋葱路由（onion routing）的一种实现，用户通过Tor可以在因特网上进行匿名交流。 Tor的"policysummarize"函数在实现上存在拒绝服务漏洞，攻击者可利用此漏洞造成拒绝服务。 此漏洞源于src/or/policies.c中的"policysummarize"函数边界错误。 Tor Tor 0.2.1.29 Tor Tor 0.2.1.28 Tor Tor 0.2.1.27 Tor Tor 0.2.1.22 Tor Tor 0.2.1.21 Tor Tor 0.2.1.20 厂商补丁： Tor ---...