Opened 7 years ago

Closed 7 years ago

#6568 closed defect (fixed)

Vidalia specifies absolute path in ControlPortWriteToFile option

Reported by: rransom Owned by: chiiph
Priority: Medium Milestone:
Component: Archived/Vidalia Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

A TBB user reports that when TBB-Tor saves its torrc, it includes an absolute path in the value of the ControlPortWriteToFile option. This may disclose a filesystem location from which a particular copy of TBB has been run.

I have tested Tor to determine whether it expands relative paths; it does not, so TBB-Vidalia must be specifying an absolute path.

Child Tickets

Change History (1)

comment:1 Changed 7 years ago by chiiph

Resolution: fixed
Status: newclosed

This has been fixed both in alpha and stable. The fix will be out with 0.3.4-alpha and 0.2.21.

Note: See TracTickets for help on using tickets.