CVE-2007-4098 in Tor

Riassunto

di MITRE

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 30/07/2007
• Divulgazione: 30/07/2007
• Moderazione: accettato
• Voce: VDB-38104
• CPE: pronto
• CWE: CWE-74 (non confermato)
• CVSS: 6.5 (VulDB)
• EPSS: 0.01896
• KEV: no
• Attività: molto basso
• Settore: Homeoffice, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4098
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4098
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4098/