CVE-2010-0385

Tor < 0.2.1.22 and 0.2.2.x < 0.2.2.7-alpha - Exposure of Sensitive Information via Bridge Descriptor Query

Title source: llm

Description

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.

References (5)

Core 5

Core References

Various Sources mailing-list x_refsource_mlist

http://archives.seul.org/or/announce/Jan-2010/msg00000.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/37901

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/61865

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/38198

Various Sources mailing-list x_refsource_mlist

http://archives.seul.org/or/talk/Jan-2010/msg00162.html

Scores

EPSS 0.0198

EPSS Percentile 78.1%

Details

CWE

CWE-200

Status published

Products (50)

tor/tor 0.0.2

tor/tor 0.0.2_pre13

tor/tor 0.0.2_pre14

tor/tor 0.0.2_pre15

tor/tor 0.0.2_pre16

tor/tor 0.0.2_pre17

tor/tor 0.0.2_pre18

tor/tor 0.0.2_pre19

tor/tor 0.0.2_pre20

tor/tor 0.0.2_pre21

... and 40 more

Published Jan 25, 2010

Tracked Since Feb 18, 2026