CVEvulnerability
CVE-2007-3165
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.
Affected configurations
• tor tor 0.0.9
• tor tor 0.0.9.1
• tor tor 0.0.9.2
• tor tor 0.0.9.3
• tor tor 0.0.9.4
• tor tor 0.0.9.5
• tor tor 0.0.9.6
• tor tor 0.0.9.7
• tor tor 0.0.9.8
• tor tor 0.0.9.9
• tor tor 0.0.9.10
• tor tor 0.1.0.10
• tor tor 0.1.0.11
• tor tor 0.1.0.12
• tor tor 0.1.0.13
• tor tor 0.1.0.14
• tor tor 0.1.1.1 alpha
• tor tor 0.1.1.2 alpha
• tor tor 0.1.1.3 alpha
• tor tor 0.1.1.4 alpha
• tor tor 0.1.1.5 alpha
• tor tor 0.1.1.20
• tor tor 0.1.1.23
• tor tor 0.1.2.1 alpha-cvs
References
- http://archives.seul.org/or/announce/May-2007/msg00000.html archives.seul.org
- http://osvdb.org/35670 osvdb.org
- http://secunia.com/advisories/25415 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24180 Patch
- http://www.vupen.com/english/advisories/2007/1964 www.vupen.com
- http://archives.seul.org/or/announce/May-2007/msg00000.html archives.seul.org
- http://osvdb.org/35670 osvdb.org
- http://secunia.com/advisories/25415 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24180 Patch
- http://www.vupen.com/english/advisories/2007/1964 www.vupen.com