Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 386211 - <net-misc/tor-0.2.1.28: Remote execution of arbitrary code (CVE-2010-1676)
Summary: <net-misc/tor-0.2.1.28: Remote execution of arbitrary code (CVE-2010-1676)
Status: RESOLVED DUPLICATE of bug 349312
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B3 [glsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2011-10-08 01:00 UTC by GLSAMaker/CVETool Bot
Modified: 2011-10-14 23:24 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2011-10-08 01:00:37 UTC 
CVE-2010-1676 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1676):
  Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before
  0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon
  crash) or possibly execute arbitrary code via unspecified vectors.
Comment 1 Tim Sammut (RETIRED) gentoo-dev 2011-10-14 23:24:42 UTC 
This issues was handled in bug 349312 and disclosed via http://www.gentoo.org/security/en/glsa/glsa-201101-02.xml.

*** This bug has been marked as a duplicate of bug 349312 ***