CVE-2007-4098

Published: Jul 30, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.

Affected (15)

Products: Tor: Tor

Tor

1 product

Tor

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Tor Tor	Version 0.1.0.10
Tor Tor	Version 0.1.0.11
Tor Tor	Version 0.1.0.12
Tor Tor	Version 0.1.0.13
Tor Tor	Version 0.1.0.14
Tor Tor	Version 0.1.0.18
Tor Tor	Version 0.1.1.1_alpha
Tor Tor	Version 0.1.1.20
Tor Tor	Version 0.1.1.23
Tor Tor	Version 0.1.1.2_alpha
Tor Tor	Version 0.1.1.3_alpha
Tor Tor	Version 0.1.1.4_alpha
Tor Tor	Version 0.1.1.5_alpha
Tor Tor	Version 0.1.2.14
Tor Tor	Version 0.1.2.1_alpha-cvs