CVE-2010-0385

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 80.88%
Affected Products (NVD)
VendorProductVersion
tortor
0.0.2
tortor
0.0.2_pre13
tortor
0.0.2_pre14
tortor
0.0.2_pre15
tortor
0.0.2_pre16
tortor
0.0.2_pre17
tortor
0.0.2_pre18
tortor
0.0.2_pre19
tortor
0.0.2_pre20
tortor
0.0.2_pre21
tortor
0.0.2_pre22
tortor
0.0.2_pre23
tortor
0.0.2_pre24
tortor
0.0.2_pre25
tortor
0.0.2_pre26
tortor
0.0.2_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.0.18
tortor
0.1.0.19
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1_alpha
tortor
0.1.1.2
tortor
0.1.1.2_alpha
tortor
0.1.1.3
tortor
0.1.1.3_alpha
tortor
0.1.1.4
tortor
0.1.1.4_alpha
tortor
0.1.1.5
tortor
0.1.1.5_alpha
tortor
0.1.1.6
tortor
0.1.1.6_alpha
tortor
0.1.1.7
tortor
0.1.1.7_alpha
tortor
0.1.1.8
tortor
0.1.1.8_alpha
tortor
0.1.1.9
tortor
0.1.1.9_alpha
tortor
0.1.1.10
tortor
0.1.1.10_alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1_alpha-cvs
tortor
0.1.2.2
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5:alpha
tortor
0.1.2.7:alpha
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.16
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.2.1.1.12
tortor
0.2.1.1.13
tortor
0.2.1.1.14
tortor
0.2.1.1.15
tortor
0.2.1.1.16
tortor
0.2.1.1.17
tortor
0.2.1.1.18
tortor
0.2.1.1.19
tortor
0.2.1.1.20
tortor
0.2.1.1.21
tortor
0.2.2.1:alpha
tortor
0.2.2.2:alpha
tortor
0.2.2.3:alpha
tortor
0.2.2.4:alpha
tortor
0.2.2.5:alpha
tortor
0.2.2.6:alpha
tortor
0.2.2.7:alpha
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
bullseye
0.4.5.16-1
fixed
bullseye (security)
0.4.5.16-1
fixed
lenny
not-affected
sid
0.4.8.13-2
fixed
trixie
0.4.8.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tor
dapper
ignored
hardy
ignored
intrepid
ignored
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
natty
not-affected
oneiric
not-affected
Common Weakness Enumeration
References
http://archives.seul.org/or/announce/Jan-2010/msg00000.html
http://archives.seul.org/or/talk/Jan-2010/msg00162.html
http://secunia.com/advisories/38198
http://www.osvdb.org/61865
http://www.securityfocus.com/bid/37901
http://archives.seul.org/or/announce/Jan-2010/msg00000.html
http://archives.seul.org/or/talk/Jan-2010/msg00162.html
http://secunia.com/advisories/38198
http://www.osvdb.org/61865
http://www.securityfocus.com/bid/37901