CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

Design/Logic Flaw

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2007-1103

CVE-2007-1103 affects Tor, where the client does not verify a node’s uptime and bandwidth advertisements. This allows a remote attacker operating a low-resource node to falsely claim greater resources, causing that node to be used in many circuits and potentially compromising the anonymity of tra...

CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2007-1103: Undefined Security Weakness

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2006-6893

The CVE-2006-6893 entry concerns Tor, specifically a timing/side-channel vulnerability where remote attackers can deduce a hidden service's IP by querying the service at high rates. The observed effect is interference with time-value patterns (ICMP timestamps, TCP sequence numbers, TCP timestamps...

CVE-2006-6893

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

CVE-2006-6893

Removed by vendor...

CVE-2006-6893: Undefined Security Weakness

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

DEBIAN-CVE-2006-6893

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

CVE-2006-6893

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

CVE-2006-6893

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

Multiple tor security vulnerabilities

Maliscious server can cause DoS condition for client or may force client to route traffic to tor network...

[Full-disclosure] ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vulnerabilities Technical Report September 2nd, 2006 CVE ID: CVE-2006-4508 OSVDB: 28276, 28277 SUMMARY ScatterChat http://www.scatterchat.com/ is an instant messaging project...

CVE-2006-4508

Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...

CVE-2006-4508

Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...

CVE-2006-4508

Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...