tocsin

Debian/tor: unknown

Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity

Action: Upgrade tor to 0.1.2.16-1 or later.

Affected

introducedfixedlast affected
00.1.2.16-1-

Fixed versions

0.1.2.16-1

Sources

published · modified · JSON