CVE-2009-0939
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/03/2009
Last modified:
18/04/2009
Description
Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:* | 0.2.0.33 (including) | |
| cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:* | ||
| cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page