CVE-2009-2426

Опубликовано: 10 июл. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.

Ссылки

http://archives.seul.org/or/announce/Jun-2009/msg00000.html
Patch
http://secunia.com/advisories/35546
Vendor Advisory
http://www.osvdb.org/55341
Patch
http://www.securityfocus.com/bid/35505
Patch
http://www.vupen.com/english/advisories/2009/1716
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51377
http://archives.seul.org/or/announce/Jun-2009/msg00000.html
Patch
http://secunia.com/advisories/35546
Vendor Advisory
http://www.osvdb.org/55341
Patch
http://www.securityfocus.com/bid/35505
Patch
http://www.vupen.com/english/advisories/2009/1716
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51377

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.25:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.3:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.5:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.6:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.1.2.7:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.7:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.8:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.9:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.33:*:*:*:*:*:*:*

cpe:2.3:a:tor:tor:0.2.0.34:alpha:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00696

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2009-2426

ubuntu

больше 16 лет назад

CVE-2009-2426

debian

больше 16 лет назад

The connection_edge_process_relay_cell_not_open function in src/or/rel ...

GHSA-r3c9-qr4c-gm4p

github

почти 4 года назад

EPSS

Процентиль: 71%

0.00696

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo