Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command. NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tails 安全漏洞
Vulnerability Description
Tails是一套专用于隐私保护的基于Tor的开源Linux操作系统，它支持安装在光盘、U盘以及SD卡存储介质中直接启动使用，其特点是不向本地系统储存任何数据并且为用户提供完整的因特网匿名功能。 Tails 1.7之前版本中存在安全漏洞，该漏洞源于程序使用wget程序，没有限制被动FTP向主动FTP的自动回退。远程攻击者可通过读取PORT或EPRT命令利用该漏洞发现Tor客户端的IP地址。
CVSS Information
N/A
Vulnerability Type
N/A