CVE-2010-0385

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:N/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
tortor
0.0.2
tortor
0.0.2_pre13
tortor
0.0.2_pre14
tortor
0.0.2_pre15
tortor
0.0.2_pre16
tortor
0.0.2_pre17
tortor
0.0.2_pre18
tortor
0.0.2_pre19
tortor
0.0.2_pre20
tortor
0.0.2_pre21
tortor
0.0.2_pre22
tortor
0.0.2_pre23
tortor
0.0.2_pre24
tortor
0.0.2_pre25
tortor
0.0.2_pre26
tortor
0.0.2_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.0.18
tortor
0.1.0.19
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1_alpha
tortor
0.1.1.2
tortor
0.1.1.2_alpha
tortor
0.1.1.3
tortor
0.1.1.3_alpha
tortor
0.1.1.4
tortor
0.1.1.4_alpha
tortor
0.1.1.5
tortor
0.1.1.5_alpha
tortor
0.1.1.6
tortor
0.1.1.6_alpha
tortor
0.1.1.7
tortor
0.1.1.7_alpha
tortor
0.1.1.8
tortor
0.1.1.8_alpha
tortor
0.1.1.9
tortor
0.1.1.9_alpha
tortor
0.1.1.10
tortor
0.1.1.10_alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1_alpha-cvs
tortor
0.1.2.2
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5
tortor
0.1.2.7
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.16
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.2.1.1.12
tortor
0.2.1.1.13
tortor
0.2.1.1.14
tortor
0.2.1.1.15
tortor
0.2.1.1.16
tortor
0.2.1.1.17
tortor
0.2.1.1.18
tortor
0.2.1.1.19
tortor
0.2.1.1.20
tortor
0.2.1.1.21
tortor
0.2.2.1
tortor
0.2.2.2
tortor
0.2.2.3
tortor
0.2.2.4
tortor
0.2.2.5
tortor
0.2.2.6
tortor
0.2.2.7
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bullseye (security)
0.4.5.16-1
fixed
bullseye
0.4.5.16-1
fixed
lenny
not-affected
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
sid
0.4.8.12-1.1
fixed
trixie
0.4.8.12-1.1
fixed
Common Weakness Enumeration
References
http://archives.seul.org/or/announce/Jan-2010/msg00000.html
http://archives.seul.org/or/talk/Jan-2010/msg00162.html
http://secunia.com/advisories/38198
http://www.osvdb.org/61865
http://www.securityfocus.com/bid/37901