PT-2015-7573 · Tor · Tails

Tomtidaly · Publicado 2015-12-27 · Atualizado 2024-06-15 · CVE-2015-7665

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tails versions prior to 1.7

Description The issue allows remote FTP servers to discover the Tor client IP address by reading a PORT or EPRT command. This occurs because Tails does not prevent automatic fallback from passive FTP to active FTP when using the wget program.

Recommendations For versions prior to 1.7, consider updating to version 1.7 or later to resolve the issue. As a temporary workaround, restrict the use of the wget program for FTP connections to minimize the risk of IP address exposure.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-7665

OPENSUSE-SU-2024:10263-1

Produtos afetados

Tails

Referências · 15

• https://mailman.boum.org/pipermail/tails-dev/2015-October/009591.html · Nota
• https://mailman.boum.org/pipermail/tails-dev/2015-August/009370.html · Nota
• https://suse.com/security/cve/CVE-2012-4929 · Nota
• http://git.savannah.gnu.org/cgit/wget.git/commit/?id=075d7556964f5a871a73c22ac4b69f5361295099 · Nota
• https://lists.gnu.org/archive/html/bug-wget/2015-08/msg00020.html · Nota
• http://securityfocus.com/bid/76678 · Nota
• https://suse.com/security/cve/CVE-2010-2252 · Nota
• https://suse.com/security/cve/CVE-2014-4877 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10263-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-7665 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7665 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-4971 · Nota
• https://labs.riseup.net/code/issues/10364 · Nota
• https://tails.boum.org/news/version_1.7/index.en.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/10/01/10 · Nota