NetSight
IP …
critical9.3

CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based…

Impact

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream.

Affected products

VendorProductAffected versions
TorTor
through 0.1.2.31
Versions 0.0.2, 0.0.2_pre13, 0.0.2_pre14, 0.0.2_pre15, 0.0.2_pre16

Weakness classification

CWE-264

References