CVE-2007-3165
published 2007-06-11CVE-2007-3165: Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic…
PriorityP418medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.48%
71.1th percentile
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tor | < tor 0.1.2.14-1 (bookworm) | tor 0.1.2.14-1 (bookworm) |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p2h5-374v-r86q: Tor before 0
ghsa_unreviewed·2022-05-01
CVE-2007-3165 [MEDIUM] GHSA-p2h5-374v-r86q: Tor before 0
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.
OSV
CVE-2007-3165: Tor before 0
osv·2007-06-11·CVSS 5.0
CVE-2007-3165 [MEDIUM] CVE-2007-3165: Tor before 0
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.
Debian
CVE-2007-3165: tor - Tor before 0.1.2.14 can construct circuits in which an entry guard is in the sam...
vendor_debian·2007·CVSS 5.0
CVE-2007-3165 [MEDIUM] CVE-2007-3165: tor - Tor before 0.1.2.14 can construct circuits in which an entry guard is in the sam...
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.
Scope: local
bookworm: resolved (fixed in 0.1.2.14-1)
bullseye: resolved (fixed in 0.1.2.14-1)
forky: resolved (fixed in 0.1.2.14-1)
sid: resolved (fixed in 0.1.2.14-1)
trixie: resolved (fixed in 0.1.2.14-1)
No detection rules found.
No public exploits indexed.
http://archives.seul.org/or/announce/May-2007/msg00000.htmlhttp://osvdb.org/35670http://secunia.com/advisories/25415http://www.securityfocus.com/bid/24180http://www.vupen.com/english/advisories/2007/1964http://archives.seul.org/or/announce/May-2007/msg00000.htmlhttp://osvdb.org/35670http://secunia.com/advisories/25415http://www.securityfocus.com/bid/24180http://www.vupen.com/english/advisories/2007/1964
2007-06-11
Published