CVE-2007-4099

Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

Link	Resource
http://archives.seul.org/or/announce/Jul-2007/msg00000.html	Patch
http://www.securityfocus.com/bid/25035	Patch
http://secunia.com/advisories/26140	Patch Vendor Advisory
http://osvdb.org/46971
http://www.vupen.com/english/advisories/2007/2634

Configuration 1

cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:* cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*

---

Published : 2007-07-30 09:17

Updated : 2011-03-08 02:57

---

NVD link : CVE-2007-4099

Mitre link : CVE-2007-4099

No products.

NVD-CWE-Other