CVE-2010-0383

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:N/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
VendorProductVersion
tortor
0.0.2
tortor
0.0.2_pre13
tortor
0.0.2_pre14
tortor
0.0.2_pre15
tortor
0.0.2_pre16
tortor
0.0.2_pre17
tortor
0.0.2_pre18
tortor
0.0.2_pre19
tortor
0.0.2_pre20
tortor
0.0.2_pre21
tortor
0.0.2_pre22
tortor
0.0.2_pre23
tortor
0.0.2_pre24
tortor
0.0.2_pre25
tortor
0.0.2_pre26
tortor
0.0.2_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.0.18
tortor
0.1.0.19
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1_alpha
tortor
0.1.1.2
tortor
0.1.1.2_alpha
tortor
0.1.1.3
tortor
0.1.1.3_alpha
tortor
0.1.1.4
tortor
0.1.1.4_alpha
tortor
0.1.1.5
tortor
0.1.1.5_alpha
tortor
0.1.1.6
tortor
0.1.1.6_alpha
tortor
0.1.1.7
tortor
0.1.1.7_alpha
tortor
0.1.1.8
tortor
0.1.1.8_alpha
tortor
0.1.1.9
tortor
0.1.1.9_alpha
tortor
0.1.1.10
tortor
0.1.1.10_alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1_alpha-cvs
tortor
0.1.2.2
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5
tortor
0.1.2.7
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.16
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.2.1.1.12
tortor
0.2.1.1.13
tortor
0.2.1.1.14
tortor
0.2.1.1.15
tortor
0.2.1.1.16
tortor
0.2.1.1.17
tortor
0.2.1.1.18
tortor
0.2.1.1.19
tortor
0.2.1.1.20
tortor
0.2.1.1.21
tortor
0.2.2.1
tortor
0.2.2.2
tortor
0.2.2.3
tortor
0.2.2.4
tortor
0.2.2.5
tortor
0.2.2.6
tortor
0.2.2.7
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bullseye (security)
0.4.5.16-1
fixed
bullseye
0.4.5.16-1
fixed
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
sid
0.4.8.12-1.1
fixed
trixie
0.4.8.12-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tor
oneiric
not-affected
natty
not-affected
maverick
dne
lucid
dne
karmic
dne
jaunty
dne
intrepid
ignored
hardy
ignored
dapper
ignored
Common Weakness Enumeration
References
http://archives.seul.org/or/announce/Jan-2010/msg00000.html
http://archives.seul.org/or/talk/Jan-2010/msg00161.html
http://archives.seul.org/or/talk/Jan-2010/msg00162.html
http://archives.seul.org/or/talk/Jan-2010/msg00165.html
http://osvdb.org/61977
http://secunia.com/advisories/38198
http://www.securityfocus.com/bid/37901