Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-01-25 11:30
Updated : 2010-02-04 23:13
NVD link : CVE-2010-0383
Mitre link : CVE-2010-0383
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
tor
- tor