full-disclosure - Tor security advisory: cross-protocol http form attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 1 Sep 2007 13:58:51 -0700
From: coderman <coderman@...il.com>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Tor security advisory: cross-protocol http form
	attack

http://archives.seul.org/or/announce/Sep-2007/msg00000.html

"... a malicious website or Tor exit node can give the Tor
user a page that includes a POST element directed to Tor's control port
(localhost:9051)...

This particular attack worked because Tor's control protocol gave an
error message on unrecognized commands but didn't hang up. So all the
http headers from the POST were unrecognized commands, and eventually
we got to the payload -- which contains recognized commands -- and it
went bad from there...

Yay full disclosure
"

even links on openbsd affected, whee!

(upgrade to 0.2.0.6-alpha to help balance the network :)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/