← Back

CVE-2011-4895

nvd nist
Published: Dec 23, 2011Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.

Affected (229)

Products: Tor: Tor
Tor
1 product
Tor
Configuration A
229 vulnerable
Vulnerable SoftwareAffected Versions
Tor
Tor
Up to 0.2.2.33
Tor
Version 0.0.2
Tor
Version 0.0.3
Tor
Version 0.0.4
Tor
Version 0.0.5
Tor
Version 0.0.6.1
Tor
Version 0.0.6.2
Tor
Version 0.0.6
Tor
Version 0.0.7.1
Tor
Version 0.0.7.2
Tor
Version 0.0.7.3
Tor
Version 0.0.7
Tor
Version 0.0.8.1
Tor
Version 0.0.8
Tor
Version 0.0.9.10
Tor
Version 0.0.9.1
Tor
Version 0.0.9.2
Tor
Version 0.0.9.3
Tor
Version 0.0.9.4
Tor
Version 0.0.9.5
Tor
Version 0.0.9.6
Tor
Version 0.0.9.7
Tor
Version 0.0.9.8
Tor
Version 0.0.9.9
Tor
Version 0.0.9
Tor
Version 0.1.0.10
Tor
Version 0.1.0.11
Tor
Version 0.1.0.12
Tor
Version 0.1.0.13
Tor
Version 0.1.0.14
Tor
Version 0.1.0.15
Tor
Version 0.1.0.16
Tor
Version 0.1.0.17
Tor
Version 0.1.0.18
Tor
Version 0.1.0.19
Tor
Version 0.1.0.1
Tor
Version 0.1.0.2
Tor
Version 0.1.0.3
Tor
Version 0.1.0.4
Tor
Version 0.1.0.5
Tor
Version 0.1.0.6
Tor
Version 0.1.0.7
Tor
Version 0.1.0.8
Tor
Version 0.1.0.9
Tor
Version 0.1.1.10
Tor
Version 0.1.1.10 alpha
Tor
Version 0.1.1.11
Tor
Version 0.1.1.12
Tor
Version 0.1.1.13
Tor
Version 0.1.1.14
Tor
Version 0.1.1.15
Tor
Version 0.1.1.16
Tor
Version 0.1.1.17
Tor
Version 0.1.1.18
Tor
Version 0.1.1.19
Tor
Version 0.1.1.1
Tor
Version 0.1.1.1 alpha
Tor
Version 0.1.1.20
Tor
Version 0.1.1.21
Tor
Version 0.1.1.22
Tor
Version 0.1.1.23
Tor
Version 0.1.1.25
Tor
Version 0.1.1.26
Tor
Version 0.1.1.2
Tor
Version 0.1.1.2 alpha
Tor
Version 0.1.1.3
Tor
Version 0.1.1.3 alpha
Tor
Version 0.1.1.4
Tor
Version 0.1.1.4 alpha
Tor
Version 0.1.1.5
Tor
Version 0.1.1.5 alpha
Tor
Version 0.1.1.6
Tor
Version 0.1.1.6 alpha
Tor
Version 0.1.1.7
Tor
Version 0.1.1.7 alpha
Tor
Version 0.1.1.8
Tor
Version 0.1.1.8 alpha
Tor
Version 0.1.1.9
Tor
Version 0.1.1.9 alpha
Tor
Version 0.1.1
Tor
Version 0.1.2.10
Tor
Version 0.1.2.11
Tor
Version 0.1.2.12
Tor
Version 0.1.2.13
Tor
Version 0.1.2.14
Tor
Version 0.1.2.15
Tor
Version 0.1.2.16
Tor
Version 0.1.2.17
Tor
Version 0.1.2.18
Tor
Version 0.1.2.19
Tor
Version 0.1.2.1 alpha-cvs
Tor
Version 0.1.2.1 alpha
Tor
Version 0.1.2.2
Tor
Version 0.1.2.30
Tor
Version 0.1.2.31
Tor
Version 0.1.2.3 alpha
Tor
Version 0.1.2.4
Tor
Version 0.1.2.5
Tor
Version 0.1.2.5 alpha
Tor
Version 0.1.2.6 alpha
Tor
Version 0.1.2.7 alpha
Tor
Version 0.1.2.8 beta
Tor
Version 0.1.2.9
Tor
Version 0.2.0.10 alpha
Tor
Version 0.2.0.11 alpha
Tor
Version 0.2.0.12 alpha
Tor
Version 0.2.0.13 alpha
Tor
Version 0.2.0.14 alpha
Tor
Version 0.2.0.15 alpha
Tor
Version 0.2.0.16 alpha
Tor
Version 0.2.0.17 alpha
Tor
Version 0.2.0.18 alpha
Tor
Version 0.2.0.19 alpha
Tor
Version 0.2.0.1 alpha
Tor
Version 0.2.0.20 alpha
Tor
Version 0.2.0.21 alpha
Tor
Version 0.2.0.22 alpha
Tor
Version 0.2.0.23 alpha
Tor
Version 0.2.0.24 alpha
Tor
Version 0.2.0.25 alpha
Tor
Version 0.2.0.26 alpha
Tor
Version 0.2.0.27 alpha
Tor
Version 0.2.0.28 alpha
Tor
Version 0.2.0.29
Tor
Version 0.2.0.29 alpha
Tor
Version 0.2.0.2 alpha
Tor
Version 0.2.0.30
Tor
Version 0.2.0.30 alpha
Tor
Version 0.2.0.31
Tor
Version 0.2.0.31 alpha
Tor
Version 0.2.0.32 alpha
Tor
Version 0.2.0.33
Tor
Version 0.2.0.34 alpha
Tor
Version 0.2.0.35
Tor
Version 0.2.0.3 alpha
Tor
Version 0.2.0.4 alpha
Tor
Version 0.2.0.5 alpha
Tor
Version 0.2.0.6 alpha
Tor
Version 0.2.0.7 alpha
Tor
Version 0.2.0.8 alpha
Tor
Version 0.2.0.9 alpha
Tor
Version 0.2.1.1.10 alpha
Tor
Version 0.2.1.1.11 alpha
Tor
Version 0.2.1.1.12
Tor
Version 0.2.1.1.12 alpha
Tor
Version 0.2.1.1.13
Tor
Version 0.2.1.1.14
Tor
Version 0.2.1.1.15
Tor
Version 0.2.1.1.16
Tor
Version 0.2.1.1.17
Tor
Version 0.2.1.1.18
Tor
Version 0.2.1.1.19
Tor
Version 0.2.1.1.1 alpha
Tor
Version 0.2.1.1.20
Tor
Version 0.2.1.1.21
Tor
Version 0.2.1.1.22
Tor
Version 0.2.1.1.23
Tor
Version 0.2.1.1.24
Tor
Version 0.2.1.1.25
Tor
Version 0.2.1.1.26
Tor
Version 0.2.1.1.27
Tor
Version 0.2.1.1.28
Tor
Version 0.2.1.1.2 alpha
Tor
Version 0.2.1.1.3 alpha
Tor
Version 0.2.1.1.4 alpha
Tor
Version 0.2.1.1.5 alpha
Tor
Version 0.2.1.1.6 alpha
Tor
Version 0.2.1.1.7 alpha
Tor
Version 0.2.1.1.8 alpha
Tor
Version 0.2.1.1.9 alpha
Tor
Version 0.2.1.10 alpha
Tor
Version 0.2.1.11 alpha
Tor
Version 0.2.1.12
Tor
Version 0.2.1.12 alpha
Tor
Version 0.2.1.13
Tor
Version 0.2.1.14
Tor
Version 0.2.1.15
Tor
Version 0.2.1.16
Tor
Version 0.2.1.17
Tor
Version 0.2.1.18
Tor
Version 0.2.1.19
Tor
Version 0.2.1.1 alpha
Tor
Version 0.2.1.20
Tor
Version 0.2.1.21
Tor
Version 0.2.1.22
Tor
Version 0.2.1.23
Tor
Version 0.2.1.24
Tor
Version 0.2.1.25
Tor
Version 0.2.1.26
Tor
Version 0.2.1.27
Tor
Version 0.2.1.28
Tor
Version 0.2.1.29
Tor
Version 0.2.1.2 alpha
Tor
Version 0.2.1.3 alpha
Tor
Version 0.2.1.4 alpha
Tor
Version 0.2.1.5 alpha
Tor
Version 0.2.1.6 alpha
Tor
Version 0.2.1.7 alpha
Tor
Version 0.2.1.8 alpha
Tor
Version 0.2.1.9 alpha
Tor
Version 0.2.2.10 alpha
Tor
Version 0.2.2.11 alpha
Tor
Version 0.2.2.12 alpha
Tor
Version 0.2.2.13 alpha
Tor
Version 0.2.2.14 alpha
Tor
Version 0.2.2.15 alpha
Tor
Version 0.2.2.16 alpha
Tor
Version 0.2.2.17 alpha
Tor
Version 0.2.2.18 alpha
Tor
Version 0.2.2.19 alpha
Tor
Version 0.2.2.1
Tor
Version 0.2.2.1 alpha
Tor
Version 0.2.2.20 alpha
Tor
Version 0.2.2.29
Tor
Version 0.2.2.29 beta
Tor
Version 0.2.2.2
Tor
Version 0.2.2.2 alpha
Tor
Version 0.2.2.32
Tor
Version 0.2.2.3
Tor
Version 0.2.2.3 alpha
Tor
Version 0.2.2.4
Tor
Version 0.2.2.4 alpha
Tor
Version 0.2.2.5
Tor
Version 0.2.2.5 alpha
Tor
Version 0.2.2.6
Tor
Version 0.2.2.6 alpha
Tor
Version 0.2.2.7 alpha
Tor
Version 0.2.2.8 alpha
Tor
Version 0.2.2.9 alpha

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.