CVE-2007-4098

Published Jul 30, 2007

Last updated 14 years ago

Overview

Description
Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.
Source
cve@mitre.org
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
5.8
Impact score
4.9
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov
NVD-CWE-Other

Configurations