Vulnerability CVE-2014-5117
Published: 2014-07-30

Description:
Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY_EARLY cells as a means of communicating information about hidden service names.

See advisories in our WLB2 database:
Topic
Author
Date
High
TOR 0.2.5.5 connecting a Tor client to a Tor hidden server
Sambuddho
31.07.2014

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.8/10
4.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
Torproject -> TOR 

 References:
http://secunia.com/advisories/60084
http://secunia.com/advisories/60647
https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack
https://lists.torproject.org/pipermail/tor-announce/2014-July/000093.html
https://lists.torproject.org/pipermail/tor-announce/2014-July/000094.html
https://lists.torproject.org/pipermail/tor-talk/2014-July/034180.html
https://trac.torproject.org/projects/tor/ticket/1038
Copyright 2024, cxsecurity.com

 

Back to Top