PT-2007-2531 · Tor+1 · Tor+1

Ringo Kamens + 1 · Published 2007-02-26 · Updated 2008-11-15 · CVE-2007-1103

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tor (affected versions not specified)

Description The issue allows remote attackers who operate a low-resource node to make false claims of greater resources. This can lead to the node being used for many circuits, compromising the anonymity of traffic sources and destinations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1103

Affected Products

Debian

Tor

References · 12

• https://security-tracker.debian.org/tracker/CVE-2007-1103 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/tor · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-1103 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1103 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1103 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1103 · Security Note
• http://osvdb.org/45249 · Note
• https://packages.debian.org/src:tor · Note
• http://cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf · Note
• http://archives.seul.org/or/talk/Feb-2007/msg00200.html · Note
• http://archives.seul.org/or/talk/Feb-2007/msg00197.html · Note
• http://archives.seul.org/or/talk/Feb-2007/msg00202.html · Note