[Secure-testing-team] Bug#512728: [SA33635] Tor Unspecified Memory Corruption Vulnerability

Giuseppe Iuculano giuseppe at iuculano.it
Fri Jan 23 07:46:38 UTC 2009


Package: tor
Severity: serious
Tags: security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

The following SA (Secunia Advisory) id was published for Tor:

SA33635[1]

> DESCRIPTION:
> A vulnerability with an unknown impact has been reported in Tor.
> 
> The vulnerability is caused due to an unspecified error and can be
> exploited to trigger a heap corruption. No further information is
> currently available. 
> 
> The vulnerability is reported in versions prior to 0.2.0.33.
> 
> SOLUTION:
> Update to version 0.2.0.33.
> 
> PROVIDED AND/OR DISCOVERED BY:
> The vendor credits Ilja van Sprundel.
> 
> ORIGINAL ADVISORY:
> http://archives.seul.org/or/announce/Jan-2009/msg00000.html

If you fix the vulnerability please also make sure to include the CVE id
(if available) in the changelog entry.

[1]http://secunia.com/advisories/33635/

Cheers,
Giuseppe.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkl5ddoACgkQNxpp46476arI/gCdEpdbHQsxIdn8VnZYpDCeKkmK
GckAn2AG2KYpVLPLwYpthoOvVZ0lKJ2Z
=uKVf
-----END PGP SIGNATURE-----





More information about the Secure-testing-team mailing list