CVE-2005-2643

Published: Aug 23, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.

Affected (27)

Products: Tor: Tor

Tor

1 product

Tor

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Tor Tor	Version 0.0.9.1
Tor Tor	Version 0.0.9.2
Tor Tor	Version 0.0.9.3
Tor Tor	Version 0.0.9.4
Tor Tor	Version 0.0.9.5
Tor Tor	Version 0.0.9.6
Tor Tor	Version 0.0.9.7
Tor Tor	Version 0.0.9.8
Tor Tor	Version 0.0.9.9
Tor Tor	Version 0.0.9
Tor Tor	Version 0.1.0.10
Tor Tor	Version 0.1.0.11
Tor Tor	Version 0.1.0.12
Tor Tor	Version 0.1.0.13
Tor Tor	Version 0.1.0.1
Tor Tor	Version 0.1.0.2
Tor Tor	Version 0.1.0.3
Tor Tor	Version 0.1.0.4
Tor Tor	Version 0.1.0.5
Tor Tor	Version 0.1.0.6
Tor Tor	Version 0.1.0.7
Tor Tor	Version 0.1.0.8
Tor Tor	Version 0.1.0.9
Tor Tor	Version 0.1.1.1_alpha
Tor Tor	Version 0.1.1.2_alpha
Tor Tor	Version 0.1.1.3_alpha
Tor Tor	Version 0.1.1.4_alpha