CVEvulnerability

CVE-2010-0384

2.1 LOW Published 2010-01-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-01-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log files.

Affected configurations

• tor tor 0.2.2.1 • tor tor 0.2.2.2 • tor tor 0.2.2.3 • tor tor 0.2.2.4 • tor tor 0.2.2.5 • tor tor 0.2.2.6

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References