CVE-2006-6893

概要

参考情報

• events.ccc.de/congress/2006/Fahrplan/events/1513.en.html
• cl.cam.ac.uk/~sjm217/papers/ccs06hotornot.pdf · Exploit
• lightbluetouchpaper.org/2006/09/04/hot-or-not-revealing-hidden-services-by-their-clock-skew

tor のその他の脆弱性

• CVE-2012-3519中 5.0routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might…
• CVE-2012-3518中 5.0The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, w…
• CVE-2012-3517中 5.0Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via ve…
• CVE-2011-4897中 4.3Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname val…
• CVE-2011-4896中 4.3Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might al…