Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
https://gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ChangeLog http://archives.seul.org/or/announce/Jan-2011/msg00000.html http://www.vuxml.org/freebsd/38bdf10e-2293-11e0-bfa4-001676740879.html
Insight
The following packages are affected:
tor
tor-devel
CVE-2011-0427
Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Severity
Classification
-
CVE CVE-2011-0427 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities