CVE:CVE-2008-5397
CNNVD:CNNVD-200812-122
Tor(The Onion Router)是第二代洋葱路由的一种实现，用户通过Tor可以在因特网上进行匿名交流。
Tor没有正确地丢弃通过User参数所指定的用户主组权限，这可能导致以非预期权限运行tor进程。这个漏洞仅影响UNIX类操作系统。
Tor没有正确地强制ClientDNSRejectInternalAddresses配置选项，这可能会削弱安全性，允许攻击者较容易的绕过安全限制。
solution:Upgrade tor tor to a higher version than 0.1.2.31,0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.1,0.1.0.2,0.1.0.3,0.1.0.4,0.1.0.5,0.1.0.6,0.1.0.7,0.1.0.8,0.1.0.9,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.0.18,0.1.0.19,0.1.1.1,0.1.1.1_alpha,0.1.1.2,0.1.1.2_alpha,0.1.1.3,0.1.1.3_alpha,0.1.1.4,0.1.1.4_alpha,0.1.1.5,0.1.1.5_alpha,0.1.1.6,0.1.1.6_alpha,0.1.1.7,0.1.1.7_alpha,0.1.1.8,0.1.1.8_alpha,0.1.1.9,0.1.1.9_alpha,0.1.1.10,0.1.1.10_alpha,0.1.1.11,0.1.1.12,0.1.1.13,0.1.1.14,0.1.1.15,0.1.1.16,0.1.1.17,0.1.1.18,0.1.1.19,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.26,0.1.2.1_alpha-cvs,0.1.2.14,0.1.2.15,0.1.2.17,0.1.2.18,0.1.2.19,0.1.2.30,and avoid the version (,0.1.2.31],0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.1,0.1.0.2,0.1.0.3,0.1.0.4,0.1.0.5,0.1.0.6,0.1.0.7,0.1.0.8,0.1.0.9,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.0.18,0.1.0.19,0.1.1.1,0.1.1.1_alpha,0.1.1.2,0.1.1.2_alpha,0.1.1.3,0.1.1.3_alpha,0.1.1.4,0.1.1.4_alpha,0.1.1.5,0.1.1.5_alpha,0.1.1.6,0.1.1.6_alpha,0.1.1.7,0.1.1.7_alpha,0.1.1.8,0.1.1.8_alpha,0.1.1.9,0.1.1.9_alpha,0.1.1.10,0.1.1.10_alpha,0.1.1.11,0.1.1.12,0.1.1.13,0.1.1.14,0.1.1.15,0.1.1.16,0.1.1.17,0.1.1.18,0.1.1.19,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.26,0.1.2.1_alpha-cvs,0.1.2.14,0.1.2.15,0.1.2.17,0.1.2.18,0.1.2.19,0.1.2.30