CVE:CVE-2007-4174
CNNVD:CNNVD-200708-078
Tor是一个工具集，帮助各类组织和个人增强互联网上活动的安全。
Tor在处理特定的连接功能时存在漏洞，远程攻击者可能利用此漏洞非授权获取访问。
如果启用了Tor中的ControlPort功能的话，则在处理到ControlPort的多个连接时远程攻击者可以在某些情况下非授权重写用户的torrc配置文件，这可能弱化软件所提供的匿名服务。
solution:Upgrade tor tor to a higher version than 0.1.2.15,0.1.2.1:alpha,0.1.2.2,0.1.2.3:alpha,0.1.2.4,0.1.2.5,0.1.2.5:alpha,0.1.2.6:alpha,0.1.2.7:alpha,0.1.2.8:beta,0.1.2.9,0.1.2.10,0.1.2.11,0.1.2.12,0.1.2.13,0.1.2.14,and avoid the version (,0.1.2.15],0.1.2.1:alpha,0.1.2.2,0.1.2.3:alpha,0.1.2.4,0.1.2.5,0.1.2.5:alpha,0.1.2.6:alpha,0.1.2.7:alpha,0.1.2.8:beta,0.1.2.9,0.1.2.10,0.1.2.11,0.1.2.12,0.1.2.13,0.1.2.14