7.2

CVE-2008-5397

Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tor ≫ Tor Version <= 0.1.2.31
Tor ≫ Tor Version 0.0.2
Tor ≫ Tor Version 0.0.2_pre13
Tor ≫ Tor Version 0.0.2_pre14
Tor ≫ Tor Version 0.0.2_pre15
Tor ≫ Tor Version 0.0.2_pre16
Tor ≫ Tor Version 0.0.2_pre17
Tor ≫ Tor Version 0.0.2_pre18
Tor ≫ Tor Version 0.0.2_pre19
Tor ≫ Tor Version 0.0.2_pre20
Tor ≫ Tor Version 0.0.2_pre21
Tor ≫ Tor Version 0.0.2_pre22
Tor ≫ Tor Version 0.0.2_pre23
Tor ≫ Tor Version 0.0.2_pre24
Tor ≫ Tor Version 0.0.2_pre25
Tor ≫ Tor Version 0.0.2_pre26
Tor ≫ Tor Version 0.0.2_pre27
Tor ≫ Tor Version 0.0.3
Tor ≫ Tor Version 0.0.4
Tor ≫ Tor Version 0.0.5
Tor ≫ Tor Version 0.0.6
Tor ≫ Tor Version 0.0.6.1
Tor ≫ Tor Version 0.0.6.2
Tor ≫ Tor Version 0.0.7
Tor ≫ Tor Version 0.0.7.1
Tor ≫ Tor Version 0.0.7.2
Tor ≫ Tor Version 0.0.7.3
Tor ≫ Tor Version 0.0.8
Tor ≫ Tor Version 0.0.8.1
Tor ≫ Tor Version 0.0.9
Tor ≫ Tor Version 0.0.9.1
Tor ≫ Tor Version 0.0.9.2
Tor ≫ Tor Version 0.0.9.3
Tor ≫ Tor Version 0.0.9.4
Tor ≫ Tor Version 0.0.9.5
Tor ≫ Tor Version 0.0.9.6
Tor ≫ Tor Version 0.0.9.7
Tor ≫ Tor Version 0.0.9.8
Tor ≫ Tor Version 0.0.9.9
Tor ≫ Tor Version 0.0.9.10
Tor ≫ Tor Version 0.1.0.1
Tor ≫ Tor Version 0.1.0.2
Tor ≫ Tor Version 0.1.0.3
Tor ≫ Tor Version 0.1.0.4
Tor ≫ Tor Version 0.1.0.5
Tor ≫ Tor Version 0.1.0.6
Tor ≫ Tor Version 0.1.0.7
Tor ≫ Tor Version 0.1.0.8
Tor ≫ Tor Version 0.1.0.9
Tor ≫ Tor Version 0.1.0.10
Tor ≫ Tor Version 0.1.0.11
Tor ≫ Tor Version 0.1.0.12
Tor ≫ Tor Version 0.1.0.13
Tor ≫ Tor Version 0.1.0.14
Tor ≫ Tor Version 0.1.0.15
Tor ≫ Tor Version 0.1.0.16
Tor ≫ Tor Version 0.1.0.17
Tor ≫ Tor Version 0.1.0.18
Tor ≫ Tor Version 0.1.0.19
Tor ≫ Tor Version 0.1.1.1
Tor ≫ Tor Version 0.1.1.1_alpha
Tor ≫ Tor Version 0.1.1.2
Tor ≫ Tor Version 0.1.1.2_alpha
Tor ≫ Tor Version 0.1.1.3
Tor ≫ Tor Version 0.1.1.3_alpha
Tor ≫ Tor Version 0.1.1.4
Tor ≫ Tor Version 0.1.1.4_alpha
Tor ≫ Tor Version 0.1.1.5
Tor ≫ Tor Version 0.1.1.5_alpha
Tor ≫ Tor Version 0.1.1.6
Tor ≫ Tor Version 0.1.1.6_alpha
Tor ≫ Tor Version 0.1.1.7
Tor ≫ Tor Version 0.1.1.7_alpha
Tor ≫ Tor Version 0.1.1.8
Tor ≫ Tor Version 0.1.1.8_alpha
Tor ≫ Tor Version 0.1.1.9
Tor ≫ Tor Version 0.1.1.9_alpha
Tor ≫ Tor Version 0.1.1.10
Tor ≫ Tor Version 0.1.1.10_alpha
Tor ≫ Tor Version 0.1.1.11
Tor ≫ Tor Version 0.1.1.12
Tor ≫ Tor Version 0.1.1.13
Tor ≫ Tor Version 0.1.1.14
Tor ≫ Tor Version 0.1.1.15
Tor ≫ Tor Version 0.1.1.16
Tor ≫ Tor Version 0.1.1.17
Tor ≫ Tor Version 0.1.1.18
Tor ≫ Tor Version 0.1.1.19
Tor ≫ Tor Version 0.1.1.20
Tor ≫ Tor Version 0.1.1.21
Tor ≫ Tor Version 0.1.1.22
Tor ≫ Tor Version 0.1.1.23
Tor ≫ Tor Version 0.1.1.26
Tor ≫ Tor Version 0.1.2.1_alpha-cvs
Tor ≫ Tor Version 0.1.2.14
Tor ≫ Tor Version 0.1.2.15
Tor ≫ Tor Version 0.1.2.17
Tor ≫ Tor Version 0.1.2.18
Tor ≫ Tor Version 0.1.2.19
Tor ≫ Tor Version 0.1.2.30
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.274
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://blog.torproject.org/blog/tor-0.2.0.32-released
http://secunia.com/advisories/33025
Vendor Advisory
http://secunia.com/advisories/34583
http://security.gentoo.org/glsa/glsa-200904-11.xml
http://www.securityfocus.com/bid/32648
Patch
http://www.vupen.com/english/advisories/2008/3366
https://exchange.xforce.ibmcloud.com/vulnerabilities/47101