NASLDB: FreeBSD : tor -- diffie-hellman handshake flaw (5fde5c30-0f4e-11da-bc01-000e0c2e438a)
General
ID: 21434
Name: FreeBSD : tor — diffie-hellman handshake flaw (5fde5c30-0f4e-11da-bc01-000e0c2e438a)
Summary: Checks for updated package in pkg_info output
Credits: Tenable Network Security, Inc.
Classification
Risk: –
CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Temporal Vector: –
Port: 0
Family: FreeBSD Local Security Checks
Type: Local
Description
A tor advisory reports
Tor clients can completely loose anonymity, confidentiality, and data
integrity if the first Tor server in their path is malicious.
Specifically, if the Tor client chooses a malicious Tor server for her
first hop in the circuit, that server can learn all the keys she
negotiates for the rest of the circuit (or just spoof the whole
circuit), and then read and/or modify all her traffic over that
circuit.
Exploiting
Exploit Available: –
Exploitability Ease: –
Sources
CVE: CVE-2005-2643
OSVDB: –
Bugtraq: –
scipID: –
Timeline
Vulnerability Disclosure: 2005/08/11
Patch Release: 2005/08/17
Plugin Release: 2006/05/13
Plugin
Version: 1.7
Filename: freebsd_pkg_5fde5c300f4e11dabc01000e0c2e438a.nasl
Filesize: 4464 bytes
MD5 Hash: 711fedd7b63542b8b9eea031beb38997
Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"
Copyright: This script is© 2006-2011 Tenable Network Security, Inc.
- Latest Plugins
- USN-1611-1 : thunderbird vulnerabilities
- USN-1610-1 : linux vulnerability
- USN-1609-1 : linux-ti-omap4 vulnerability
- SuSE 10 Security Update : PostgreSQL
- RHSA-2012-1364: bind97
- RHSA-2012-1363: bind
- RHSA-2012-1362: thunderbird
- RHSA-2012-1361: xulrunner
- Mandriva Linux Security Advisory : graphicsmagick
- FreeBSD : phpMyAdmin — Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages and Fetching the version information from a non-SSL site is vulnerable to a MITM attack