Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 01:12
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://archives.seul.org/or/announce/Jan-2010/msg00000.html - | |
| References | () http://archives.seul.org/or/talk/Jan-2010/msg00161.html - | |
| References | () http://archives.seul.org/or/talk/Jan-2010/msg00162.html - | |
| References | () http://archives.seul.org/or/talk/Jan-2010/msg00165.html - | |
| References | () http://osvdb.org/61977 - | |
| References | () http://secunia.com/advisories/38198 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/37901 - | 
Information
                Published : 2010-01-25 19:30
Updated : 2025-04-11 00:51
NVD link : CVE-2010-0383
Mitre link : CVE-2010-0383
CVE.ORG link : CVE-2010-0383
JSON object : View
Products Affected
                tor
- tor
CWE
                
                    
                        
                        CWE-200
                        
            Exposure of Sensitive Information to an Unauthorized Actor
