CVE:CVE-2013-7295
CNNVD:CNNVD-201401-371
Tor（The Onion Router）是第二代洋葱路由（onion routing）的一种实现，主要用于匿名访问互联网。
Tor 0.2.4.20之前的版本中存在安全漏洞，该漏洞源于程序对‘relay’和‘hidden-service’身份密钥没有正确生成随机数。远程攻击者可利用该漏洞绕过加密保护机制。
solution:Upgrade torproject tor to a higher version than 0.2.4.19,0.2.4.1:alpha,0.2.4.2:alpha,0.2.4.3:alpha,0.2.4.4:alpha,0.2.4.5:alpha,0.2.4.6:alpha,0.2.4.7:alpha,0.2.4.8:alpha,0.2.4.9:alpha,0.2.4.10:alpha,0.2.4.11:alpha,0.2.4.12:alpha,0.2.4.13:alpha,0.2.4.14:alpha,0.2.4.15:rc,0.2.4.16:rc,0.2.4.17:rc,0.2.4.18:rc,and avoid the version (,0.2.4.19],0.2.4.1:alpha,0.2.4.2:alpha,0.2.4.3:alpha,0.2.4.4:alpha,0.2.4.5:alpha,0.2.4.6:alpha,0.2.4.7:alpha,0.2.4.8:alpha,0.2.4.9:alpha,0.2.4.10:alpha,0.2.4.11:alpha,0.2.4.12:alpha,0.2.4.13:alpha,0.2.4.14:alpha,0.2.4.15:rc,0.2.4.16:rc,0.2.4.17:rc,0.2.4.18:rc