This host is installed with Tor and is prone to Information Disclosure vulnerability.

Successful exploitation will allow attackers to obtain client IP information that can help them launch further attacks. Impact level: Application

Upgrade to version 0.2.2.7-alpha http://www.torproject.org/download.html.en

The issue is due to directory mirror which does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients by reading log files.

Tor version 0.2.2.x before 0.2.2.7-alpha on Linux.

• http://archives.seul.org/or/announce/Jan-2010/msg00000.html
• http://secunia.com/advisories/38198

---

Updated on 2015-03-25