CVE-2007-1103

published 2007-02-26

CVE-2007-1103: Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater…

medium 4.3 CVSS 3.1

AV N AC M Au N C P I N A N

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	tor	—	—
tor	tor	<= 0.1.1.26	—

CVSS provenance

nvd 4.3 MEDIUM AV:N/AC:M/Au:N/C:P/I:N/A:N

osv 4.3 MEDIUM