GLSA-200904-11 : Tor: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200904-11 Tor: Multiple vulnerabilities Theo de Raadt reported that the application does not properly drop privileges to the primary groups of the user specified via the 'User' configuration option CVE-2008-5397. rovv reported tha...

Tor: Multiple vulnerabilities

Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Theo de Raadt reported that the application does not properly drop privileges to the primary groups of the user specified via the "User" configuration optio...

CVE-2009-0937

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...

CVE-2009-0938

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...

DEBIAN-CVE-2009-0938

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...

DEBIAN-CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

DEBIAN-CVE-2009-0937

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...

CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

CVE-2009-0938

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...

CVE-2009-0937

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...

CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

CVE-2009-0936

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

DEBIAN-CVE-2009-0936

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

CVE-2009-0936

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

Code injection

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

Design/Logic Flaw

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

Design/Logic Flaw

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...

Input validation

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...

CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

CVE-2009-0937

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...