cbcvebase.
CVE-2007-4099
published 2007-07-30

CVE-2007-4099: Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain…

PriorityP421medium5.8CVSS 2.0
AVNACMAuNCPINAP
EPSS
1.90%
77.3th percentile
Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

Affected

20 ranges
VendorProductVersion rangeFixed in
debiantor< tor 0.1.2.15-1 (bookworm)tor 0.1.2.15-1 (bookworm)
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1
torprojecttor>= 0 < 0.1.2.15-10.1.2.15-1

CVSS provenance

nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
osv5.8MEDIUM
vendor_debian5.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.