PT-2008-6514 · Tor · Tor

Theo De Raadt · Publicado 2008-12-08 · Atualizado 2017-08-08 · CVE-2008-5397

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.0.32

Description The issue is related to the improper processing of the User and Group configuration options, which could allow local users to gain privileges. This is possible due to unintended supplementary group memberships of the Tor process.

Recommendations For versions prior to 0.2.0.32, update to version 0.2.0.32 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-5397

Produtos afetados

Tor

Referências · 12

• https://osv.dev/vulnerability/CVE-2008-5397 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2008-5397 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-5397 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5397 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47101 · Nota
• http://securityfocus.com/bid/32648 · Correção
• http://secunia.com/advisories/34583 · Nota
• http://vupen.com/english/advisories/2008/3366 · Nota
• http://security.gentoo.org/glsa/glsa-200904-11.xml · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/47101 · Nota
• http://secunia.com/advisories/33025 · Aviso do Fabricante
• http://blog.torproject.org/blog/tor-0.2.0.32-released · Nota