Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

Tags

browser, bug, bundle, linux, security, tor

Special Forums Cybersecurity Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

03-19-2012

Registered User

1, 0

Join Date: Feb 2012

Last Activity: 19 March 2012, 2:03 PM EDT

Posts: 1

Thanks Given: 0

Thanked 0 Times in 0 Posts

Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

There is an EVIL bug in at least the Linux (2.2.35-8) Tor Browser Bundle start-tor-browser script. It will log things like domain names to a file in the root of the browser bundle.

trac.torproject.org/projects/tor/ticket/5417

Ticket #5417 (new defect)

RelativeLink.sh in Tor browser bundle has small typo causing debug mode to be always turned on

Reported by: cypherpunks
Priority: critical
Component: Tor bundles/installation

Description

TBB starts in debug mode disregardless of --debug switch used or not. This is caused by small bug on line 208 on RelativeLink.sh, where it says

if [ "${debug}" ];

where it should say

if [ "${debug}" == 1];

or

if [ ${debug} -eq 1 ];

madeinindia

View Public Profile for madeinindia

Find all posts by madeinindia

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Is this a bug of linux's "ls" command?

I found an interesting thing with ls. do the following steps in your linux: open a terminal mkdir x cd x echo "aaa" > test1 ls <you will see test1> Don't close the terminal, open another terminal rm -r x mkdir x cd x echo "aaa" > test2 ls <you will see test2> Now go to the first...

LEARN ABOUT REDHAT

tor-resolve

TOR-RESOLVE(1)							    Tor Manual							    TOR-RESOLVE(1)

NAME

       tor-resolve - resolve a hostname to an IP address via tor

SYNOPSIS

       tor-resolve [-4|-5] [-v] [-x] hostname [sockshost[:socksport]]

DESCRIPTION

       tor-resolve is a simple script to connect to a SOCKS proxy that knows about the SOCKS RESOLVE command, hand it a hostname, and return an IP
       address.

       By default, tor-resolve uses the Tor server running on 127.0.0.1 on SOCKS port 9050. If this isn't what you want, you should specify an
       explicit sockshost and/or socksport on the command line.

OPTIONS

       -v
	   Display verbose output.

       -x
	   Perform a reverse lookup: get the PTR record for an IPv4 address.

       -5
	   Use the SOCKS5 protocol. (Default)

       -4
	   Use the SOCKS4a protocol rather than the default SOCKS5 protocol. Doesn't support reverse DNS.

SEE ALSO

       tor(1), torify(1).

       See doc/socks-extensions.txt in the Tor package for protocol details.

AUTHORS

       Roger Dingledine <arma@mit.edu>, Nick Mathewson <nickm@alum.mit.edu>.

AUTHOR

       Peter Palfrader
	   Author.

Tor								    09/26/2014							    TOR-RESOLVE(1)

Cybersecurity