Vulnerabilities > CVE-2007-4098 - Unspecified vulnerability in TOR

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

tor

NVD

Published: 2007-07-30

Updated: 2024-11-21

Summary

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.

Vulnerable Configurations

Part	Description	Count
Application	Tor TOR TOR 0.1.1.1_Alpha TOR TOR 0.1.2.1_Alpha-Cvs TOR TOR 0.1.0.18 TOR TOR 0.1.1.23 TOR TOR 0.1.0.10 TOR TOR 0.1.0.12 TOR TOR 0.1.1.3_Alpha TOR TOR 0.1.2.14 TOR TOR 0.1.0.13 TOR TOR 0.1.0.14 TOR TOR 0.1.1.4_Alpha TOR TOR 0.1.1.2_Alpha TOR TOR 0.1.1.20 TOR TOR 0.1.1.5_Alpha TOR TOR 0.1.0.11	15

References

http://archives.seul.org/or/announce/Jul-2007/msg00000.html
http://archives.seul.org/or/announce/Jul-2007/msg00000.html
http://osvdb.org/46970
http://osvdb.org/46970
http://secunia.com/advisories/26140
http://secunia.com/advisories/26140
http://www.securityfocus.com/bid/25035
http://www.securityfocus.com/bid/25035
http://www.vupen.com/english/advisories/2007/2634
http://www.vupen.com/english/advisories/2007/2634