This host is installed with Tor and is prone to Information Disclosure vulnerability.

Successful exploitation will allow attackers to obtain sensitive information that can help them launch further attacks. Impact level: Application

Upgrade to version 0.2.1.22 or later http://www.torproject.org/download.html.en

The issue is due to bridge directory authorities disclosing all tracked bridge identities when responding to 'dbg-stability.txt' directory queries.

Tor version prior to 0.2.1.22 and 0.2.2.x before 0.2.2.7-alpha on Linux.

• http://archives.seul.org/or/announce/Jan-2010/msg00000.html
• http://archives.seul.org/or/talk/Jan-2010/msg00162.html
• http://osvdb.org/61865
• http://secunia.com/advisories/38198

---

Updated on 2015-03-25