NetSight
IP …
critical10.0

CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using…

Impact

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0.

Affected products

VendorProductAffected versions
TorTor
through 0.2.0.33
Versions 0.2.0.1, 0.2.0.2, 0.2.0.3, 0.2.0.4, 0.2.0.5

References