Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption.

The remote host is affected by the vulnerability described in GLSA-200904-11 (Tor: Multiple vulnerabilities)

    Theo de Raadt reported that the application does not properly drop     privileges to the primary groups of the user specified via the 'User'     configuration option (CVE-2008-5397).
    rovv reported that the 'ClientDNSRejectInternalAddresses' configuration     option is not always enforced (CVE-2008-5398).
    Ilja van Sprundel reported a heap-corruption vulnerability that might     be remotely triggerable on some platforms (CVE-2009-0414).
    It has been reported that incomplete IPv4 addresses are treated as     valid, violating the specification (CVE-2009-0939).
    Three unspecified vulnerabilities have also been reported     (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938).
  Impact :

    A local attacker could escalate privileges by leveraging unintended     supplementary group memberships of the Tor process. A remote attacker     could exploit these vulnerabilities to cause a heap corruption with     unknown impact and attack vectors, to cause a Denial of Service via CPU     consuption or daemon crash, and to weaken anonymity provided by the     service.
  Workaround :

    There is no known workaround at this time.

Secunia reports :

A vulnerability with an unknown impact has been reported in Tor.

The vulnerability is caused due to an unspecified error and can be exploited to trigger a heap corruption. No further information is currently available.

New upstream release 0.2.0.33, with lots of bug fixes and one security fix: https://blog.torproject.org/blog/tor-0.2.0.33-stable-released

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
36139	GLSA-200904-11 : Tor: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
35562	FreeBSD : tor -- unspecified memory corruption vulnerability (100a9ed2-ee56-11dd-ab4f-0030843d3802)	Nessus	FreeBSD Local Security Checks	critical
35457	Fedora 9 : tor-0.2.0.33-1.fc9 (2009-0897)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2009-0414

critical

Tenable Plugins

critical

critical

critical