Expose user IP if TOR crashs
T
Tor
Submitted None
Actions:
Reported by
rbcafe
Vulnerability Details
Technical details and impact analysis
Greetings,
I have noticed that for unpredictable reason a TOR relay can exposes the IP of an user. I noticed this by going to the server http://195.176.3.24/ and getting information about the headers. I arrived to this header who is : "X-Your-Address-Is" .
How :
--
- So I went to this tor-relay without being with TOR.
- My IP was shown inside the X-Your-Address-Is
- Then I go to this tor-relay with being with TOR.
- A Tor IP was shown inside the X-Your-Address-Is
{F346664}
Then :
--
I noticed upon this that there was a clear pattern, so I tried to search more information on Shodan exposing information :
- The url for the search was : https://www.shodan.io/search?query=%22Address%22+Content-Encoding%3A+identity
- I obtained servers
- The X-Your-Address-Is was clearly exposed indicating IPS.
{F346661}
Expectation :
--
The TOR relay should be able to distinguish a non-tor-ip from a tor-ip. It should not be possible to leak IP user information if the user is not clearly within a TOR session.
Best regards
@Rbcafe
## Impact
- Expose an IP if TOR crash for unexpected reason.
- There is no security net if TOR crashes.
Report Details
Additional information and metadata
State
Closed
Substate
Informative