PT-2007-4448 · Tor · Tor

Lodger · Published 2007-06-11 · Updated 2011-03-08 · CVE-2007-3165

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Tor versions prior to 0.1.2.14

Description: The issue allows circuits to be constructed in which an entry guard is in the same family as the exit node. This could compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.

Recommendations: For versions prior to 0.1.2.14, update to version 0.1.2.14 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3165

Affected Products

Tor

References · 9

• http://securityfocus.com/bid/24180 · Patch
• http://secunia.com/advisories/25415 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-3165 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-3165 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-3165 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3165 · Security Note
• http://osvdb.org/35670 · Note
• http://archives.seul.org/or/announce/May-2007/msg00000.html · Note
• http://vupen.com/english/advisories/2007/1964 · Note