Loading HuntDB...

Expose user IP if TOR crashs

T
Tor
Submitted None
Reported by rbcafe

Vulnerability Details

Technical details and impact analysis

Greetings, I have noticed that for unpredictable reason a TOR relay can exposes the IP of an user. I noticed this by going to the server http://195.176.3.24/ and getting information about the headers. I arrived to this header who is : "X-Your-Address-Is" . How : -- - So I went to this tor-relay without being with TOR. - My IP was shown inside the X-Your-Address-Is - Then I go to this tor-relay with being with TOR. - A Tor IP was shown inside the X-Your-Address-Is {F346664} Then : -- I noticed upon this that there was a clear pattern, so I tried to search more information on Shodan exposing information : - The url for the search was : https://www.shodan.io/search?query=%22Address%22+Content-Encoding%3A+identity - I obtained servers - The X-Your-Address-Is was clearly exposed indicating IPS. {F346661} Expectation : -- The TOR relay should be able to distinguish a non-tor-ip from a tor-ip. It should not be possible to leak IP user information if the user is not clearly within a TOR session. Best regards @Rbcafe ## Impact - Expose an IP if TOR crash for unexpected reason. - There is no security net if TOR crashes.

Report Details

Additional information and metadata

State

Closed

Substate

Informative

Submitted