PT-2009-3069 · Tor · Tor

Ilja Van Sprundel · Publicado 2009-02-03 · Atualizado 2011-03-08 · CVE-2009-0414

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.0.33

Description The issue is related to an unspecified vulnerability that triggers heap corruption and has remote attack vectors. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 0.2.0.33, update to version 0.2.0.33 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-0414

Produtos afetados

Tor

Referências · 14

• 🔥 http://archives.seul.org/or/announce/Jan-2009/msg00000.html · Exploit
• https://redhat.com/archives/fedora-package-announce/2009-January/msg00902.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0414 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/0210 · Nota
• https://osv.dev/vulnerability/CVE-2009-0414 · Aviso do Fabricante
• http://securitytracker.com/id?1021633 · Nota
• http://secunia.com/advisories/34583 · Nota
• http://security.gentoo.org/glsa/glsa-200904-11.xml · Aviso do Fabricante
• http://blog.torproject.org/blog/tor-0.2.0.33-stable-released · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2009-0414 · Aviso do Fabricante
• http://secunia.com/advisories/33635 · Aviso do Fabricante
• http://securityfocus.com/bid/33399 · Correção
• http://secunia.com/advisories/33677 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0414 · Nota de Segurança