← Back

CVE-2010-0384

nvd nist
Published: Jan 25, 2010Modified: Apr 29, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log files.

Affected (12)

Products: Tor: Tor
Tor
1 product
Tor
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Tor
Tor
Version 0.2.2.1
Tor
Version 0.2.2.1 alpha
Tor
Version 0.2.2.2
Tor
Version 0.2.2.2 alpha
Tor
Version 0.2.2.3
Tor
Version 0.2.2.3 alpha
Tor
Version 0.2.2.4
Tor
Version 0.2.2.4 alpha
Tor
Version 0.2.2.5
Tor
Version 0.2.2.5 alpha
Tor
Version 0.2.2.6
Tor
Version 0.2.2.6 alpha

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.