CVE-2009-0654
First published: Fri Feb 20 2009(Updated: )
Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and an exit router, to confirm that a sender and receiver are communicating via vectors involving (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, and then observing cell recognition errors at the exit router. NOTE: the vendor disputes the significance of this issue, noting that the product's design "accepted end-to-end correlation as an attack that is too expensive to solve."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tor Tor | =0.2.0.11-alpha | |
| Tor Tor | =0.2.0.22-alpha | |
| Tor Tor | =0.2.0.19-alpha | |
| Tor Tor | =0.2.0.31-alpha | |
| Tor Tor | =0.2.0.14-alpha | |
| Tor Tor | =0.2.0.28-alpha | |
| Tor Tor | =0.2.0.17-alpha | |
| Tor Tor | =0.2.0.25-alpha | |
| Tor Tor | =0.2.0.26-alpha | |
| Tor Tor | =0.2.0.12-alpha | |
| Tor Tor | =0.2.0.3-alpha | |
| Tor Tor | =0.2.0.7-alpha | |
| Tor Tor | =0.2.0.18-alpha | |
| Tor Tor | =0.2.0.4-alpha | |
| Tor Tor | =0.2.0.27-alpha | |
| Tor Tor | =0.2.0.32-alpha | |
| Tor Tor | =0.2.0.15-alpha | |
| Tor Tor | =0.2.0.9-alpha | |
| Tor Tor | =0.2.0.2-alpha | |
| Tor Tor | =0.2.0.8-alpha | |
| Tor Tor | =0.2.0.24-alpha | |
| Tor Tor | =0.2.0.21-alpha | |
| Tor Tor | =0.2.0.20-alpha | |
| Tor Tor | =0.2.0.13-alpha | |
| Tor Tor | <=0.2.0.34 | |
| Tor Tor | =0.2.0.1-alpha | |
| Tor Tor | =0.2.0.23-alpha | |
| Tor Tor | =0.2.0.10-alpha | |
| Tor Tor | =0.2.0.29-alpha | |
| Tor Tor | =0.2.0.30-alpha | |
| Tor Tor | =0.2.0.6-alpha | |
| Tor Tor | =0.2.0.16-alpha | |
| Tor Tor | =0.2.0.5-alpha |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/tor
- canonical/tor tor
- version/tor tor/0.2.0.11-alpha
- version/tor tor/0.2.0.22-alpha
- version/tor tor/0.2.0.19-alpha
- version/tor tor/0.2.0.31-alpha
- version/tor tor/0.2.0.14-alpha
- version/tor tor/0.2.0.28-alpha
- version/tor tor/0.2.0.17-alpha
- version/tor tor/0.2.0.25-alpha
- version/tor tor/0.2.0.26-alpha
- version/tor tor/0.2.0.12-alpha
- version/tor tor/0.2.0.3-alpha
- version/tor tor/0.2.0.7-alpha
- version/tor tor/0.2.0.18-alpha
- version/tor tor/0.2.0.4-alpha
- version/tor tor/0.2.0.27-alpha
- version/tor tor/0.2.0.32-alpha
- version/tor tor/0.2.0.15-alpha
- version/tor tor/0.2.0.9-alpha
- version/tor tor/0.2.0.2-alpha
- version/tor tor/0.2.0.8-alpha
- version/tor tor/0.2.0.24-alpha
- version/tor tor/0.2.0.21-alpha
- version/tor tor/0.2.0.20-alpha
- version/tor tor/0.2.0.13-alpha
- version/tor tor/0.2.0.34
- version/tor tor/0.2.0.1-alpha
- version/tor tor/0.2.0.23-alpha
- version/tor tor/0.2.0.10-alpha
- version/tor tor/0.2.0.29-alpha
- version/tor tor/0.2.0.30-alpha
- version/tor tor/0.2.0.6-alpha
- version/tor tor/0.2.0.16-alpha
- version/tor tor/0.2.0.5-alpha