PT-2007-4448 · Tor · Tor

Lodger · Publicado 2007-06-11 · Atualizado 2011-03-08 · CVE-2007-3165

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Tor versions prior to 0.1.2.14

Description: The issue allows circuits to be constructed in which an entry guard is in the same family as the exit node. This could compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.

Recommendations: For versions prior to 0.1.2.14, update to version 0.1.2.14 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-3165

Produtos afetados

Tor

Referências · 9

• http://osvdb.org/35670 · Nota
• http://securityfocus.com/bid/24180 · Correção
• http://secunia.com/advisories/25415 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-3165 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-3165 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2007-3165 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-3165 · Nota de Segurança
• http://archives.seul.org/or/announce/May-2007/msg00000.html · Nota
• http://vupen.com/english/advisories/2007/1964 · Nota