Test ID:	1.3.6.1.4.1.25623.1.0.804934
Category:	General
Title:	Tor 'Relay Early' Traffic Confirmation Attack Vulnerability (Oct 2014) - Linux
Summary:	Tor is prone to an information disclosure vulnerability.
Description:	Summary: Tor is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists due to an error in the handling of sequences of Relay and Relay Early commands. Vulnerability Impact: Successful exploitation will allow attackers to manipulate protocol headers and perform traffic confirmation attack. Affected Software/OS: Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha. Solution: Update to version 0.2.4.23, 0.2.5.6-alpha or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-5117 https://lists.torproject.org/pipermail/tor-announce/2014-July/000093.html https://lists.torproject.org/pipermail/tor-announce/2014-July/000094.html https://lists.torproject.org/pipermail/tor-talk/2014-July/034180.html http://secunia.com/advisories/60084 http://secunia.com/advisories/60647
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.