CVE-2010-0383

Tor < 0.2.1.22 and 0.2.2.x < 0.2.2.7-alpha - Exposure of Sensitive Information via Deprecated Identity Keys

Title source: llm

Description

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.

References (7)

Core 7

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/38198

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/37901

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/61977

Various Sources mailing-list x_refsource_mlist

http://archives.seul.org/or/announce/Jan-2010/msg00000.html

Various Sources mailing-list x_refsource_mlist

http://archives.seul.org/or/talk/Jan-2010/msg00161.html

Various Sources mailing-list x_refsource_mlist

http://archives.seul.org/or/talk/Jan-2010/msg00165.html

Various Sources mailing-list x_refsource_mlist

http://archives.seul.org/or/talk/Jan-2010/msg00162.html

Scores

EPSS 0.0167

EPSS Percentile 74.1%

Details

CWE

CWE-200

Status published

Products (50)

tor/tor 0.0.2

tor/tor 0.0.2_pre13

tor/tor 0.0.2_pre14

tor/tor 0.0.2_pre15

tor/tor 0.0.2_pre16

tor/tor 0.0.2_pre17

tor/tor 0.0.2_pre18

tor/tor 0.0.2_pre19

tor/tor 0.0.2_pre20

tor/tor 0.0.2_pre21

... and 40 more

Published Jan 25, 2010

Tracked Since Feb 18, 2026