CVE-2007-4098 in Tor

Sumário

de MITRE

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 30/07/2007
• Divulgação: 30/07/2007
• Moderação: aceite
• Entrada: VDB-38104
• CPE: pronto
• CWE: CWE-74 (não confirmado)
• CVSS: 6.5 (VulDB)
• EPSS: 0.01896
• KEV: não
• Atividades: muito baixo
• Sector: Government, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4098
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4098
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4098/