[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #22740 [Core Tor/Tor]: vulnerability allows you to access not-specified port from tor client

#22740: vulnerability allows you to access not-specified port from tor client
------------------------------+-----------------
     Reporter:  cypherpunks   |      Owner:
         Type:  defect        |     Status:  new
     Priority:  Immediate     |  Milestone:
    Component:  Core Tor/Tor  |    Version:
     Severity:  Critical      |   Keywords:
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+-----------------
 null-byte.wonderhowto.com/how-to/hack-tor-hidden-services-0166673/

 If I have "Hiddenservice 80 127.0.0.1:80" only, I expect
 no one access to not-80 ports. Isn't this a vulnerability?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22740>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs