CVE-2007-3165

Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://archives.seul.org/or/announce/May-2007/msg00000.html
http://osvdb.org/35670
http://secunia.com/advisories/25415	Patch Vendor Advisory
http://www.securityfocus.com/bid/24180	Patch
http://www.vupen.com/english/advisories/2007/1964

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tor:tor:0.0.9:::::::*
	cpe:2.3:a:tor:tor:0.0.9.1:::::::*
	cpe:2.3:a:tor:tor:0.0.9.2:::::::*
	cpe:2.3:a:tor:tor:0.0.9.3:::::::*
	cpe:2.3:a:tor:tor:0.0.9.4:::::::*
	cpe:2.3:a:tor:tor:0.0.9.5:::::::*
	cpe:2.3:a:tor:tor:0.0.9.6:::::::*
	cpe:2.3:a:tor:tor:0.0.9.7:::::::*
	cpe:2.3:a:tor:tor:0.0.9.8:::::::*
	cpe:2.3:a:tor:tor:0.0.9.9:::::::*
	cpe:2.3:a:tor:tor:0.0.9.10:::::::*
	cpe:2.3:a:tor:tor:0.1.0.10:::::::*
	cpe:2.3:a:tor:tor:0.1.0.11:::::::*
	cpe:2.3:a:tor:tor:0.1.0.12:::::::*
	cpe:2.3:a:tor:tor:0.1.0.13:::::::*
	cpe:2.3:a:tor:tor:0.1.0.14:::::::*
	cpe:2.3:a:tor:tor:0.1.1.1_alpha:::::::*
	cpe:2.3:a:tor:tor:0.1.1.2_alpha:::::::*
	cpe:2.3:a:tor:tor:0.1.1.3_alpha:::::::*
	cpe:2.3:a:tor:tor:0.1.1.4_alpha:::::::*
	cpe:2.3:a:tor:tor:0.1.1.5_alpha:::::::*
	cpe:2.3:a:tor:tor:0.1.1.20:::::::*
	cpe:2.3:a:tor:tor:0.1.1.23:::::::*
	cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:::::::*

History

No history.

Information

Published : 2007-06-11 22:30

Updated : 2024-02-28 11:01

NVD link : CVE-2007-3165

Mitre link : CVE-2007-3165

CVE.ORG link : CVE-2007-3165

JSON object : View

Products Affected

tor

tor

CWE

NVD-CWE-Other

{"id": "CVE-2007-3165", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-06-11T22:30:00.000", "references": [{"url": "http://archives.seul.org/or/announce/May-2007/msg00000.html", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/35670", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/25415", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24180", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/1964", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers."}, {"lang": "es", "value": "Tor anterior a 0.1.2.14 puede construir circuitos en los cuales un protector de entrada est\u00e1 en la misma familia que el nodo de la salida, lo cual puede comprometer el anonimato de las fuentes y de los destinatarios del tr\u00e1fico exponiendo tr\u00e1fico a los observadores remotos inadecuados."}], "lastModified": "2011-03-08T02:55:46.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0490AB18-A839-400D-88E2-D918B1EEFA00"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBED980F-A8B9-4C44-957C-FD18867B1799"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E033E0C-C7F6-4910-A795-28BA60E9431A"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AAAACA5-F431-4D83-B04D-EC9A81C96184"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1D5B46C-E7D3-495F-861C-12324F09EC9F"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "639E3063-34CC-4AE2-B055-92D36ECAADF2"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"}, {"criteria": "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33928D26-39DF-4E15-9979-F9484913C219"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8607F3C9-F185-4B87-8A1B-B9495A4F244D"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "667201BB-5FDA-4E51-B865-0AF8507DBCDA"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "811CE708-CEE6-4B0F-98E5-E138C06EA382"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6860F802-FEC2-449A-A5FC-AFACCA8633CC"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4D9E677-01D2-4800-82AA-F5585475D500"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C589D4F-60B3-450B-860A-9975BB47BBE2"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "342D2B8A-A832-4CAB-9389-93764B0DE241"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F0A70AA-931A-4906-B4AD-D56E90683716"}, {"criteria": "cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "197BFA5D-8C65-4F59-B4A0-B6AB7B11EC07"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}