Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2011-4896
HistoryDec 23, 2011 - 3:59 a.m.

CVE-2011-4896

2011-12-2303:59:22
Debian Security Bug Tracker
security-tracker.debian.org
14
cve-2011-4896
tor
insecure configuration

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

69.5%

Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port.

OSVersionArchitecturePackageVersionFilename
Debian12alltor< 0.2.2.27-beta-1tor_0.2.2.27-beta-1_all.deb
Debian11alltor< 0.2.2.27-beta-1tor_0.2.2.27-beta-1_all.deb
Debian999alltor< 0.2.2.27-beta-1tor_0.2.2.27-beta-1_all.deb
Debian13alltor< 0.2.2.27-beta-1tor_0.2.2.27-beta-1_all.deb

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

69.5%

Related for DEBIANCVE:CVE-2011-4896