CVE-2007-4097

Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications.

Link	Resource
http://archives.seul.org/or/announce/Jul-2007/msg00000.html	Patch
http://www.securityfocus.com/bid/25035	Patch
http://secunia.com/advisories/26140	Patch Vendor Advisory
http://osvdb.org/46969
http://www.vupen.com/english/advisories/2007/2634

Configuration 1

cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*

---

Published : 2007-07-30 09:17

Updated : 2011-03-08 02:57

---

NVD link : CVE-2007-4097

Mitre link : CVE-2007-4097

No products.

NVD-CWE-Other