Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• tor torup to 0.1.2.15 inclusive
• tor tor0.1.2.1
• tor tor0.1.2.10
• tor tor0.1.2.11
• tor tor0.1.2.12
• tor tor0.1.2.13
• tor tor0.1.2.14
• tor tor0.1.2.2
• tor tor0.1.2.3
• tor tor0.1.2.4
• tor tor0.1.2.5
• tor tor0.1.2.6
• tor tor0.1.2.7
• tor tor0.1.2.8
• tor tor0.1.2.9

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2010-1676Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (da
  42Plan
• CVE-2009-0939Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as
  41Plan
• CVE-2009-0414Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption.
  41Plan
• CVE-2008-5398Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay is
  38Monitor
• CVE-2011-2778Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possi
  31Monitor
• CVE-2006-3409Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer
  31Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.