CVE-2007-4099

Published: Jul 30, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

Affected (15)

Products: Tor: Tor

Tor

1 product

Tor

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Tor Tor	Version 0.1.0.10
Tor Tor	Version 0.1.0.11
Tor Tor	Version 0.1.0.12
Tor Tor	Version 0.1.0.13
Tor Tor	Version 0.1.0.14
Tor Tor	Version 0.1.0.18
Tor Tor	Version 0.1.1.1_alpha
Tor Tor	Version 0.1.1.20
Tor Tor	Version 0.1.1.23
Tor Tor	Version 0.1.1.2_alpha
Tor Tor	Version 0.1.1.3_alpha
Tor Tor	Version 0.1.1.4_alpha
Tor Tor	Version 0.1.1.5_alpha
Tor Tor	Version 0.1.2.14
Tor Tor	Version 0.1.2.1_alpha-cvs