"Gentoo Linux Security Advisory GLSA 200904-11
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: High
Title: Tor: Multiple vulnerabilities
Date: April 08, 2009
Bugs: #250018, #256078, #258833
ID: 200904-11
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Multiple vulnerabilities in Tor might allow for heap corruption, Denial
of Service, escalation of privileges and information disclosure.
Background
==========
Tor is an implementation of second generation Onion Routing, a
connection-oriented anonymizing communication service.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-misc/tor < 0.2.0.34 > = 0.2.0.34
Description
===========
* Theo de Raadt reported that the application does not properly drop
privileges to the primary groups of the user specified via the "User"
configuration option (CVE-2008-5397).
* rovv reported that the "ClientDNSRejectInternalAddresses"
configuration option is not always enforced (CVE-2008-5398).
* Ilja van Sprundel reported a heap-corruption vulnerability that
might be remotely triggerable on some platforms (CVE-2009-0414).
* It has been reported that incomplete IPv4 addresses are treated as
valid, violating the specification (CVE-2009-0939).
* Three unspecified vulnerabilities have also been reported
(CVE-2009-0936, CVE-2009-0937, CVE-2009-0938).
Impact
======
A local attacker could escalate privileges by leveraging unintended
supplementary group memberships of the Tor process. A remote attacker
could exploit these vulnerabilities to cause a heap corruption with
unknown impact and attack vectors, to cause a Denial of Service via CPU
consuption or daemon crash, and to weaken anonymity provided by the
service.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All Tor users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/tor-0.2.0.34"
References
==========
[ 1 ] CVE-2008-5397
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5397
[ 2 ] CVE-2008-5398
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5398
[ 3 ] CVE-2009-0414
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0414
[ 4 ] CVE-2009-0936
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0936
[ 5 ] CVE-2009-0937
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0937
[ 6 ] CVE-2009-0938
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0938
[ 7 ] CVE-2009-0939
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0939
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200904-11.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2009 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
"
Kanye says ‘South Park’ put him in check
(AP)
GLSA 200904-11 Tor: Multiple vulnerabilities
This entry was posted
on 11:23 PM
.
Archives
-
▼
2009
(488)
-
▼
April
(30)
- DSA 1772-1: New udev packages fix privilege escala...
- GLSA 200904-15 mpg123: User-assisted execution of...
- USN-758-1: udev vulnerabilities
- RHSA-2009:0350-01 Moderate: php security update
- RHSA-2009:0421-01 Moderate: ghostscript security u...
- GLSA 200904-13 Ventrilo: Denial of Service
- USN-756-1: ClamAV vulnerability
- DSA 1770-1: New imp4 packages fix cross-site scrip...
- DSA 1754-1: New roundup packages fix privilege esc...
- ull-disclosure [ GLSA 200904-11
- DSA 1769-1: New openjdk-6 packages fix arbitrary c...
- ull-disclosure [ GLSA 200904-12
- GLSA 200904-10 Avahi: Denial of Service
- DSA 1766-1: New krb5 packages fix several vulnerab...
- GLSA 200904-09 MIT Kerberos 5: Multiple vulnerabi...
- DSA 1767-1: New multipath-tools packages fix denia...
- RHSA-2009:0377-01 Important: java-1.6.0-openjdk se...
- GLSA 200904-11 Tor: Multiple vulnerabilities
- GLSA 200904-04 WeeChat: Denial of Service
- DSA 1761-1: New moodle packages fix file disclosure
- GLSA 200904-03 Gnumeric: Untrusted search path
- DSA 1758-1: New nss-ldapd packages fix information...
- GLSA 200904-01 Openfire: Multiple vulnerabilities
- RHSA-2009:0326-01 Important: kernel security and b...
- DSA 1762-1: New icu packages fix cross site scripting
- GLSA 200903-40 Analog: Denial of Service
- RHSA-2009:0402-01 Important: openswan security update
- DSA 1759-1: New strongswan packages fix denial of ...
- RHSA-2009:0398-01 Critical: seamonkey security update
- GLSA 200903-41 gedit: Untrusted search path
-
▼
April
(30)