[Full-disclosure] Tor security advisory: cross-protocol http form attack
coderman at gmail.com
Sat Sep 1 21:58:51 BST 2007
"... a malicious website or Tor exit node can give the Tor
user a page that includes a POST element directed to Tor's control port
This particular attack worked because Tor's control protocol gave an
error message on unrecognized commands but didn't hang up. So all the
http headers from the POST were unrecognized commands, and eventually
we got to the payload -- which contains recognized commands -- and it
went bad from there...
Yay full disclosure
even links on openbsd affected, whee!
(upgrade to 0.2.0.6-alpha to help balance the network :)
Full-Disclosure is hosted and sponsored by Secunia.