cbcvebase.
CVE-2007-4099
published 2007-07-30

CVE-2007-4099: Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain…

medium5.8CVSS 3.1
AVNACMAuNCPINAP
Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

Affected

20 ranges
VendorProductVersion rangeFixed in
debiantor< tor 0.1.2.15-1 (bookworm)tor 0.1.2.15-1 (bookworm)
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1

CVSS provenance

nvd5.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
osv5.8MEDIUM