← Back

CVE-2008-5398

nvd nist
Published: Dec 9, 2008Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream.

Affected (100)

Products: Tor: Tor
1 product
Tor
Configuration A
100 vulnerable
Vulnerable SoftwareAffected Versions
Tor
Up to 0.1.2.31
Version 0.0.2
Version 0.0.2_pre13
Version 0.0.2_pre14
Version 0.0.2_pre15
Version 0.0.2_pre16
Version 0.0.2_pre17
Version 0.0.2_pre18
Version 0.0.2_pre19
Version 0.0.2_pre20
Version 0.0.2_pre21
Version 0.0.2_pre22
Version 0.0.2_pre23
Version 0.0.2_pre24
Version 0.0.2_pre25
Version 0.0.2_pre26
Version 0.0.2_pre27
Version 0.0.3
Version 0.0.4
Version 0.0.5
Version 0.0.6.1
Version 0.0.6.2
Version 0.0.6
Version 0.0.7.1
Version 0.0.7.2
Version 0.0.7.3
Version 0.0.7
Version 0.0.8.1
Version 0.0.8
Version 0.0.9.10
Version 0.0.9.1
Version 0.0.9.2
Version 0.0.9.3
Version 0.0.9.4
Version 0.0.9.5
Version 0.0.9.6
Version 0.0.9.7
Version 0.0.9.8
Version 0.0.9.9
Version 0.0.9
Version 0.1.0.10
Version 0.1.0.11
Version 0.1.0.12
Version 0.1.0.13
Version 0.1.0.14
Version 0.1.0.15
Version 0.1.0.16
Version 0.1.0.17
Version 0.1.0.18
Version 0.1.0.19
Version 0.1.0.1
Version 0.1.0.2
Version 0.1.0.3
Version 0.1.0.4
Version 0.1.0.5
Version 0.1.0.6
Version 0.1.0.7
Version 0.1.0.8
Version 0.1.0.9
Version 0.1.1.10
Version 0.1.1.10_alpha
Version 0.1.1.11
Version 0.1.1.12
Version 0.1.1.13
Version 0.1.1.14
Version 0.1.1.15
Version 0.1.1.16
Version 0.1.1.17
Version 0.1.1.18
Version 0.1.1.19
Version 0.1.1.1
Version 0.1.1.1_alpha
Version 0.1.1.20
Version 0.1.1.21
Version 0.1.1.22
Version 0.1.1.23
Version 0.1.1.26
Version 0.1.1.2
Version 0.1.1.2_alpha
Version 0.1.1.3
Version 0.1.1.3_alpha
Version 0.1.1.4
Version 0.1.1.4_alpha
Version 0.1.1.5
Version 0.1.1.5_alpha
Version 0.1.1.6
Version 0.1.1.6_alpha
Version 0.1.1.7
Version 0.1.1.7_alpha
Version 0.1.1.8
Version 0.1.1.8_alpha
Version 0.1.1.9
Version 0.1.1.9_alpha
Version 0.1.2.14
Version 0.1.2.15
Version 0.1.2.17
Version 0.1.2.18
Version 0.1.2.19
Version 0.1.2.1_alpha-cvs
Version 0.1.2.30

Related CWEs

References (14)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.