Secunia

A vulnerability and a weakness have been reported in Tor, which can be exploited by malicious people to cause a DoS (Denial of Service) and bypass certain security restrictions.

Two unspecified errors in the communication handling can be exploited by a malicious Tor server to route traffic through the client to the Tor network or crash the client.

Successful exploitation requires that the malicious Tor server is the first server in the path (entry node).

The vulnerability and the weakness have been reported in versions prior to 0.1.0.18 and 0.1.1.23 for the 0.1.0.x and 0.1.1.x branches, and in version 0.1.2.1-alpha-cvs.

Solution
Update to version 0.1.0.18 or 0.1.1.23.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://archives.seul.org/or/announce/Aug-2006/msg00001.html

Deep Links
Links available in Customer Area