106 results · Feed
-
Unscored —
Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local…
-
Unscored —
Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations w…
-
Unscored —CVE-2007-4174 Public exploit
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which all…
-
Unscored —
Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to cause a denial of servi…
-
Unscored —
Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers …
-
Unscored —
Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attacke…
-
Unscored —
Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows …
-
Unscored —
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might …
-
Unscored —
Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resou…
-
Unscored —
Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.…
-
Unscored —
Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows re…
-
Unscored —
Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers…
-
Unscored —
TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, whi…
-
Unscored —
Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, whi…
-
Unscored —
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allow…
-
Unscored —
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote att…
-
Unscored —
Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a ma…
-
Unscored —
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-pr…
-
Unscored —
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which a…
-
Unscored —
Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause a…
-
Unscored —
Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to …
-
Unscored —
Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes…
-
Unscored —
Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intend…
-
Unscored —
Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a larg…
-
Unscored —
Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when u…
-
Unscored —
Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key informat…