Description
Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service (flood) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tor | 0.1.1.23-1 | — |
| Debian 13 | tor | 0.1.1.23-1 | — |
| Debian 12 | tor | 0.1.1.23-1 | — |
References
- 21725 third-party-advisory
- 19785 vdb-entry
- http://www.scatterchat.com/advisories/2006-02_tech.html
- [or-announce] 20060829 Tor security advisory: clients will route traffic mailing-list
- tor-trafficrouting-dos(28686) vdb-entry
- 21708 third-party-advisory