Lucene search

[email protected]CVE-2007-3165

HistoryJun 11, 2007 - 10:30 p.m.

CVE-2007-3165

2007-06-1122:30:00

[email protected]

web.nvd.nist.gov

tor

vulnerability

circuit construction

cve-2007-3165

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.2%

JSON

Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.

Affected configurations

NVD

Node

tortorMatch0.0.9

tortorMatch0.0.9.1

tortorMatch0.0.9.2

tortorMatch0.0.9.3

tortorMatch0.0.9.4

tortorMatch0.0.9.5

tortorMatch0.0.9.6

tortorMatch0.0.9.7

tortorMatch0.0.9.8

tortorMatch0.0.9.9

tortorMatch0.0.9.10

tortorMatch0.1.0.10

tortorMatch0.1.0.11

tortorMatch0.1.0.12

tortorMatch0.1.0.13

tortorMatch0.1.0.14

tortorMatch0.1.1.1_alpha

tortorMatch0.1.1.2_alpha

tortorMatch0.1.1.3_alpha

tortorMatch0.1.1.4_alpha

tortorMatch0.1.1.5_alpha

tortorMatch0.1.1.20

tortorMatch0.1.1.23

tortorMatch0.1.2.1_alpha-cvs

CPENameOperatorVersion
tor:tortoreq0.0.9
tor:tortoreq0.0.9.1
tor:tortoreq0.0.9.2
tor:tortoreq0.0.9.3
tor:tortoreq0.0.9.4
tor:tortoreq0.0.9.5
tor:tortoreq0.0.9.6
tor:tortoreq0.0.9.7
tor:tortoreq0.0.9.8
tor:tortoreq0.0.9.9

CPE	Name	Operator	Version
tor:tor	tor	eq	0.0.9
tor:tor	tor	eq	0.0.9.1
tor:tor	tor	eq	0.0.9.2
tor:tor	tor	eq	0.0.9.3
tor:tor	tor	eq	0.0.9.4
tor:tor	tor	eq	0.0.9.5
tor:tor	tor	eq	0.0.9.6
tor:tor	tor	eq	0.0.9.7
tor:tor	tor	eq	0.0.9.8
tor:tor	tor	eq	0.0.9.9