CVE-2010-0385

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
tortor
0.0.2
tortor
0.0.2_pre13:_pre13
tortor
0.0.2_pre14:_pre14
tortor
0.0.2_pre15:_pre15
tortor
0.0.2_pre16:_pre16
tortor
0.0.2_pre17:_pre17
tortor
0.0.2_pre18:_pre18
tortor
0.0.2_pre19:_pre19
tortor
0.0.2_pre20:_pre20
tortor
0.0.2_pre21:_pre21
tortor
0.0.2_pre22:_pre22
tortor
0.0.2_pre23:_pre23
tortor
0.0.2_pre24:_pre24
tortor
0.0.2_pre25:_pre25
tortor
0.0.2_pre26:_pre26
tortor
0.0.2_pre27:_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.0.18
tortor
0.1.0.19
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1_alpha:_alpha
tortor
0.1.1.2
tortor
0.1.1.2_alpha:_alpha
tortor
0.1.1.3
tortor
0.1.1.3_alpha:_alpha
tortor
0.1.1.4
tortor
0.1.1.4_alpha:_alpha
tortor
0.1.1.5
tortor
0.1.1.5_alpha:_alpha
tortor
0.1.1.6
tortor
0.1.1.6_alpha:_alpha
tortor
0.1.1.7
tortor
0.1.1.7_alpha:_alpha
tortor
0.1.1.8
tortor
0.1.1.8_alpha:_alpha
tortor
0.1.1.9
tortor
0.1.1.9_alpha:_alpha
tortor
0.1.1.10
tortor
0.1.1.10_alpha:_alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1_alpha-cvs:_alpha
tortor
0.1.2.2
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5:alpha
tortor
0.1.2.7:alpha
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.16
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.2.1.1.12
tortor
0.2.1.1.13
tortor
0.2.1.1.14
tortor
0.2.1.1.15
tortor
0.2.1.1.16
tortor
0.2.1.1.17
tortor
0.2.1.1.18
tortor
0.2.1.1.19
tortor
0.2.1.1.20
tortor
0.2.1.1.21
tortor
0.2.2.1:alpha
tortor
0.2.2.2:alpha
tortor
0.2.2.3:alpha
tortor
0.2.2.4:alpha
tortor
0.2.2.5:alpha
tortor
0.2.2.6:alpha
tortor
0.2.2.7:alpha
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bullseye (security)
0.4.5.16-1
fixed
bullseye
0.4.5.16-1
fixed
lenny
not-affected
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
sid
0.4.8.13-2
fixed
trixie
0.4.8.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tor
oneiric
not-affected
natty
not-affected
maverick
dne
lucid
dne
karmic
dne
jaunty
dne
intrepid
ignored
hardy
ignored
dapper
ignored
Common Weakness Enumeration
References
http://archives.seul.org/or/announce/Jan-2010/msg00000.html
http://archives.seul.org/or/talk/Jan-2010/msg00162.html
http://secunia.com/advisories/38198
http://www.osvdb.org/61865
http://www.securityfocus.com/bid/37901
http://archives.seul.org/or/announce/Jan-2010/msg00000.html
http://archives.seul.org/or/talk/Jan-2010/msg00162.html
http://secunia.com/advisories/38198
http://www.osvdb.org/61865
http://www.securityfocus.com/bid/37901