Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:12
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.seul.org/or/announce/Jan-2010/msg00000.html - | |
References | () http://archives.seul.org/or/talk/Jan-2010/msg00162.html - | |
References | () http://secunia.com/advisories/38198 - Vendor Advisory | |
References | () http://www.osvdb.org/61865 - | |
References | () http://www.securityfocus.com/bid/37901 - |
Information
Published : 2010-01-25 19:30
Updated : 2024-11-21 01:12
NVD link : CVE-2010-0385
Mitre link : CVE-2010-0385
CVE.ORG link : CVE-2010-0385
JSON object : View
Products Affected
tor
- tor
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor