PT-2007-2531 · Tor+1 · Tor+1

Ringo Kamens + 1 · Publicado 2007-02-26 · Atualizado 2008-11-15 · CVE-2007-1103

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tor (affected versions not specified)

Description The issue allows remote attackers who operate a low-resource node to make false claims of greater resources. This can lead to the node being used for many circuits, compromising the anonymity of traffic sources and destinations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-1103

Produtos afetados

Debian

Tor

Referências · 12

• https://security-tracker.debian.org/tracker/CVE-2007-1103 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/tor · Aviso do Fabricante
• http://osvdb.org/45249 · Nota
• https://packages.debian.org/src:tor · Nota
• https://osv.dev/vulnerability/CVE-2007-1103 · Aviso do Fabricante
• http://cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf · Nota
• http://archives.seul.org/or/talk/Feb-2007/msg00200.html · Nota
• http://archives.seul.org/or/talk/Feb-2007/msg00197.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1103 · Nota de Segurança
• http://archives.seul.org/or/talk/Feb-2007/msg00202.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1103 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1103 · Nota de Segurança