tor/changes/bug6710 at b7c172c9ec762363562220a354feefc521970d7c - tor - Gitea: Git with a cup of darkness

mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00

Files

T

Nick Mathewson b7c172c9ec Disable extending to private/internal addresses by default

This is important, since otherwise an attacker can use timing info
to probe the internal network.

Also, add an option (ExtendAllowPrivateAddresses) so that
TestingTorNetwork won't break.

Fix for bug 6710; bugfix on all released versions of Tor.

2012-08-27 11:19:29 -04:00

8 lines

304 B

Plaintext

Raw Blame History

   o Major bugfixes (security):
     - Reject any attempt to extend to an internal address. Without
       this fix, a router could be used to probe addresses on an
       internal network to see whether they were accepting
       connections. Fix for bug 6710; bugfix on all released versions
       of Tor.