Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

Tags

browser, bug, bundle, linux, security, tor

Special Forums Cybersecurity Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

03-19-2012

Registered User

1, 0

Join Date: Feb 2012

Last Activity: 19 March 2012, 2:03 PM EDT

Posts: 1

Thanks Given: 0

Thanked 0 Times in 0 Posts

Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

There is an EVIL bug in at least the Linux (2.2.35-8) Tor Browser Bundle start-tor-browser script. It will log things like domain names to a file in the root of the browser bundle.

trac.torproject.org/projects/tor/ticket/5417

Ticket #5417 (new defect)

RelativeLink.sh in Tor browser bundle has small typo causing debug mode to be always turned on

Reported by: cypherpunks
Priority: critical
Component: Tor bundles/installation

Description

TBB starts in debug mode disregardless of --debug switch used or not. This is caused by small bug on line 208 on RelativeLink.sh, where it says

if [ "${debug}" ];

where it should say

if [ "${debug}" == 1];

or

if [ ${debug} -eq 1 ];

madeinindia

View Public Profile for madeinindia

Find all posts by madeinindia

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Is this a bug of linux's "ls" command?

I found an interesting thing with ls. do the following steps in your linux: open a terminal mkdir x cd x echo "aaa" > test1 ls <you will see test1> Don't close the terminal, open another terminal rm -r x mkdir x cd x echo "aaa" > test2 ls <you will see test2> Now go to the first...

LEARN ABOUT DEBIAN

bundle::apache::asp::extra

Bundle::Apache::ASP::Extra(3pm) 			User Contributed Perl Documentation			   Bundle::Apache::ASP::Extra(3pm)

NAME

	 Bundle::Apache::ASP::Extra - Install modules that provide additional functionality to Apache::ASP

SYNOPSIS

	perl -MCPAN -e 'install Bundle::Apache::ASP::Extra'

CONTENTS

       Bundle::Apache::ASP  - Base for Apache::ASP installation

       CGI	   - Required for file upload, make test, and command line ./cgi/asp script

       HTML::Parser	 - Required for HTML::FillInForm

       HTML::Clean	- Compress text/html with Clean config or $Response->{Clean} set to 1-9

       Net::SMTP   - Runtime errors can be mailed to the webmaster with MailErrorTo config

       Devel::Symdump	- Used for StatINC setting, which reloads modules dynamically

       Apache::DBI	- Cache database connections per process

       Compress::Zlib	 - Gzip compress HTML output on the fly

       Time::HiRes	 - Sub second timing of execution with Debug 3 or -3 enabled

       HTML::FillInForm  - FormFill functionality which autofills HTML forms from form data

       Apache::Filter	 - Required for SSI filtering with Apache::SSI

       HTML::SimpleParse - Required for SSI filtering with Apache::SSI

       Apache::SSI	 - Required for full server side includes support ( SSI ) beyond file includes

       Tie::TextDir	 - Fast file based cache for CacheDB, good for caching large values for things like XSLT and $Response->Include() caching

       Bundle::XML	 - Required for XML::XSLT support.

       XML::XSLT	 - Required for XSLT support.  May also use XML::Sablotron and XML::LibXSLT for this, which are not part of this bundle.

DESCRIPTION

       This bundle contains extra modules used by Apache::ASP.

AUTHOR

       Joshua Chamas

perl v5.14.2							    2011-08-15					   Bundle::Apache::ASP::Extra(3pm)

Cybersecurity