CVE-2008-5397
N/A
N/A
Summary
Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://secunia.com/advisories/34583
- http://www.securityfocus.com/bid/32648
- http://secunia.com/advisories/33025
- http://www.vupen.com/english/advisories/2008/3366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47101
- http://blog.torproject.org/blog/tor-0.2.0.32-released
- http://security.gentoo.org/glsa/glsa-200904-11.xml
References
- http://secunia.com/advisories/34583
- http://www.securityfocus.com/bid/32648
- http://secunia.com/advisories/33025
- http://www.vupen.com/english/advisories/2008/3366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47101
- http://blog.torproject.org/blog/tor-0.2.0.32-released
- http://security.gentoo.org/glsa/glsa-200904-11.xml
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.