Vulnerabilities > CVE-2007-4099 - Unspecified vulnerability in TOR

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

tor

NVD

Published: 2007-07-30

Updated: 2024-11-21

Summary

Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

Vulnerable Configurations

Part	Description	Count
Application	Tor TOR TOR 0.1.1.1_Alpha TOR TOR 0.1.2.1_Alpha-Cvs TOR TOR 0.1.0.18 TOR TOR 0.1.1.23 TOR TOR 0.1.0.10 TOR TOR 0.1.0.12 TOR TOR 0.1.1.3_Alpha TOR TOR 0.1.2.14 TOR TOR 0.1.0.13 TOR TOR 0.1.0.14 TOR TOR 0.1.1.4_Alpha TOR TOR 0.1.1.2_Alpha TOR TOR 0.1.1.20 TOR TOR 0.1.1.5_Alpha TOR TOR 0.1.0.11	15

References

http://archives.seul.org/or/announce/Jul-2007/msg00000.html
http://archives.seul.org/or/announce/Jul-2007/msg00000.html
http://osvdb.org/46971
http://osvdb.org/46971
http://secunia.com/advisories/26140
http://secunia.com/advisories/26140
http://www.securityfocus.com/bid/25035
http://www.securityfocus.com/bid/25035
http://www.vupen.com/english/advisories/2007/2634
http://www.vupen.com/english/advisories/2007/2634