CVE-2007-4097
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/07/2007
Last modified:
08/03/2011
Description
Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications.
Impact
Base Score 2.0
6.40
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:* | ||
cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page