PT-2009-3295 · Tor+1 · Tor+1

Published 2009-02-20 · Updated 2009-02-25 · CVE-2009-0654

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tor versions 0.2.0.28 and earlier

Description The issue allows remote attackers, with control of an entry router and an exit router, to confirm that a sender and receiver are communicating. This can be achieved through various vectors, including replaying, modifying, inserting, or deleting a single cell, and then observing cell recognition errors at the exit router.

Recommendations For Tor versions 0.2.0.28 and earlier, consider restricting access to the entry and exit routers to minimize the risk of exploitation. As a temporary workaround, consider implementing additional monitoring to detect cell recognition errors at the exit router. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2009-0654

Affected Products

Debian

Tor

References · 10

• 🔥 http://blackhat.com/presentations/bh-dc-09/Fu/BlackHat-DC-09-Fu-Break-Tors-Anonymity.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0654 · Security Note
• https://security-tracker.debian.org/tracker/source-package/tor · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0654 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0654 · Security Note
• https://osv.dev/vulnerability/CVE-2009-0654 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0654 · Vendor Advisory
• https://packages.debian.org/src:tor · Note
• http://blog.torproject.org/blog/one-cell-enough · Note
• http://blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Fu · Note