This host is installed with Tor browser and is prone to information disclosure vulnerability.

Successful exploitation will allow attackers to manipulate protocol headers and perform traffic confirmation attack. Impact Level: Application

Upgrade to version 0.2.4.23 or 0.2.5.6-alpha or later, For updates refer to https://www.torproject.org

Flaw exists due to an error in the handling of sequences of Relay and Relay Early commands.

Tor browser before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha on Windows

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://osvdb.com/109666
• http://xforce.iss.net/xforce/xfdb/95053
• https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack

---

Updated on 2015-03-25