CVE-2008-5397

Published: Dec 9, 2008Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.

Affected (100)

Products: Tor: Tor

Tor

1 product

Tor

Configuration A

100 vulnerable

Vulnerable Software	Affected Versions
Tor Tor	Up to 0.1.2.31
Tor Tor	Version 0.0.2
Tor Tor	Version 0.0.2_pre13
Tor Tor	Version 0.0.2_pre14
Tor Tor	Version 0.0.2_pre15
Tor Tor	Version 0.0.2_pre16
Tor Tor	Version 0.0.2_pre17
Tor Tor	Version 0.0.2_pre18
Tor Tor	Version 0.0.2_pre19
Tor Tor	Version 0.0.2_pre20
Tor Tor	Version 0.0.2_pre21
Tor Tor	Version 0.0.2_pre22
Tor Tor	Version 0.0.2_pre23
Tor Tor	Version 0.0.2_pre24
Tor Tor	Version 0.0.2_pre25
Tor Tor	Version 0.0.2_pre26
Tor Tor	Version 0.0.2_pre27
Tor Tor	Version 0.0.3
Tor Tor	Version 0.0.4
Tor Tor	Version 0.0.5
Tor Tor	Version 0.0.6.1
Tor Tor	Version 0.0.6.2
Tor Tor	Version 0.0.6
Tor Tor	Version 0.0.7.1
Tor Tor	Version 0.0.7.2
Tor Tor	Version 0.0.7.3
Tor Tor	Version 0.0.7
Tor Tor	Version 0.0.8.1
Tor Tor	Version 0.0.8
Tor Tor	Version 0.0.9.10
Tor Tor	Version 0.0.9.1
Tor Tor	Version 0.0.9.2
Tor Tor	Version 0.0.9.3
Tor Tor	Version 0.0.9.4
Tor Tor	Version 0.0.9.5
Tor Tor	Version 0.0.9.6
Tor Tor	Version 0.0.9.7
Tor Tor	Version 0.0.9.8
Tor Tor	Version 0.0.9.9
Tor Tor	Version 0.0.9
Tor Tor	Version 0.1.0.10
Tor Tor	Version 0.1.0.11
Tor Tor	Version 0.1.0.12
Tor Tor	Version 0.1.0.13
Tor Tor	Version 0.1.0.14
Tor Tor	Version 0.1.0.15
Tor Tor	Version 0.1.0.16
Tor Tor	Version 0.1.0.17
Tor Tor	Version 0.1.0.18
Tor Tor	Version 0.1.0.19
Tor Tor	Version 0.1.0.1
Tor Tor	Version 0.1.0.2
Tor Tor	Version 0.1.0.3
Tor Tor	Version 0.1.0.4
Tor Tor	Version 0.1.0.5
Tor Tor	Version 0.1.0.6
Tor Tor	Version 0.1.0.7
Tor Tor	Version 0.1.0.8
Tor Tor	Version 0.1.0.9
Tor Tor	Version 0.1.1.10
Tor Tor	Version 0.1.1.10_alpha
Tor Tor	Version 0.1.1.11
Tor Tor	Version 0.1.1.12
Tor Tor	Version 0.1.1.13
Tor Tor	Version 0.1.1.14
Tor Tor	Version 0.1.1.15
Tor Tor	Version 0.1.1.16
Tor Tor	Version 0.1.1.17
Tor Tor	Version 0.1.1.18
Tor Tor	Version 0.1.1.19
Tor Tor	Version 0.1.1.1
Tor Tor	Version 0.1.1.1_alpha
Tor Tor	Version 0.1.1.20
Tor Tor	Version 0.1.1.21
Tor Tor	Version 0.1.1.22
Tor Tor	Version 0.1.1.23
Tor Tor	Version 0.1.1.26
Tor Tor	Version 0.1.1.2
Tor Tor	Version 0.1.1.2_alpha
Tor Tor	Version 0.1.1.3
Tor Tor	Version 0.1.1.3_alpha
Tor Tor	Version 0.1.1.4
Tor Tor	Version 0.1.1.4_alpha
Tor Tor	Version 0.1.1.5
Tor Tor	Version 0.1.1.5_alpha
Tor Tor	Version 0.1.1.6
Tor Tor	Version 0.1.1.6_alpha
Tor Tor	Version 0.1.1.7
Tor Tor	Version 0.1.1.7_alpha
Tor Tor	Version 0.1.1.8
Tor Tor	Version 0.1.1.8_alpha
Tor Tor	Version 0.1.1.9
Tor Tor	Version 0.1.1.9_alpha
Tor Tor	Version 0.1.2.14
Tor Tor	Version 0.1.2.15
Tor Tor	Version 0.1.2.17
Tor Tor	Version 0.1.2.18
Tor Tor	Version 0.1.2.19
Tor Tor	Version 0.1.2.1_alpha-cvs
Tor Tor	Version 0.1.2.30