Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
https://gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ChangeLog http://archives.seul.org/or/announce/Dec-2010/msg00000.html http://archives.seul.org/or/talk/Dec-2010/msg00167.html http://www.vuxml.org/freebsd/4bd33bc5-0cd6-11e0-bfa4-001676740879.html
Insight
The following packages are affected:
tor
tor-devel
CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Severity
Classification
-
CVE CVE-2010-1676 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities