CVE-2009-2426 Server-side request forgery in n/a
Exit relays can force Tor controllers to accept DNS responses redirecting to internal IPs, enabling Server-Side Request Forgery attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-2426?
CVE-2009-2426 is a medium-severity server-side request forgery vulnerability in Tor Tor, published on 10 Jul 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.
Which versions are affected by CVE-2009-2426?
It affects 1 product.
Products include Tor Tor.
How do I fix CVE-2009-2426?
Upgrade to a fixed version.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2009-2426 being exploited?
There is no known exploitation of CVE-2009-2426 in the wild and no public exploit code.
Other vulnerabilities in Tor Tor
- CVE-2010-1676 Memory corruption in n/a
- CVE-2009-0939 Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as
- CVE-2009-0414 Memory corruption in n/a
- CVE-2008-5398 Information disclosure in n/a
- CVE-2011-2778 Memory corruption in n/a
Sources
Also known as DEBIAN-CVE-2009-2426, GHSA-r3c9-qr4c-gm4p.