CVE-2007-1103

Published: Feb 26, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations.

Affected (1)

Products: Tor: Tor

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tor Tor	Up to 0.1.1.26

References (10)

http://archives.seul.org/or/talk/Feb-2007/msg00197.html

Source: cve@mitre.org

http://archives.seul.org/or/talk/Feb-2007/msg00200.html

Source: cve@mitre.org

http://archives.seul.org/or/talk/Feb-2007/msg00202.html

Source: cve@mitre.org

http://osvdb.org/45249

Source: cve@mitre.org

http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf

Source: cve@mitre.org

http://archives.seul.org/or/talk/Feb-2007/msg00197.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.seul.org/or/talk/Feb-2007/msg00200.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.seul.org/or/talk/Feb-2007/msg00202.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/45249

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.