Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tor信息泄露漏洞
Vulnerability Description
Tor（The Onion Router）是第二代洋葱路由（onion routing）的一种实现，主要用于匿名访问互联网。 Tor 0.2.2.34之前的版本中存在漏洞。其配置为桥接器时直接使用DirPort访问而不是Tor TLS连接来取目录，远程攻击者更易于通过观察DirPort连接来枚举桥接器。
CVSS Information
N/A
Vulnerability Type
N/A