cbcvebase.
CVE-2011-2769
published 2011-12-23

CVE-2011-2769: Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it…

medium4.3CVSS 3.1
AVNACMAuNCPINAN
Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values.

Affected

210 ranges· showing 25
VendorProductVersion rangeFixed in
debiantor< tor 0.2.2.34-1 (bookworm)tor 0.2.2.34-1 (bookworm)
tortor<= 0.2.2.33
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv4.3MEDIUM