Vulnerability in Tor
CVE-2007-4097
Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications.
EPSS: 0.022 (80.9th percentile) — read the EPSS interpretation.
Affected products
- Tor — versions 0.1.0.10, 0.1.0.11, 0.1.0.12
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Patch)