CVE-2007-1103 Business logic in n/a
Remote attackers can spoof node resources to attract traffic, compromising user anonymity in the Tor network.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-1103?
CVE-2007-1103 is a medium-severity vulnerability in Tor Tor, published on 26 Feb 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations.
Which versions are affected by CVE-2007-1103?
It affects 1 product.
Products include Tor Tor.
How do I fix CVE-2007-1103?
No fix has been published for CVE-2007-1103 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-1103 being exploited?
There is no known exploitation of CVE-2007-1103 in the wild and no public exploit code.
Other vulnerabilities in Tor Tor
- CVE-2010-1676 Memory corruption in n/a
- CVE-2009-0939 Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as
- CVE-2009-0414 Memory corruption in n/a
- CVE-2008-5398 Information disclosure in n/a
- CVE-2011-2778 Memory corruption in n/a
Sources
Also known as DEBIAN-CVE-2007-1103, GHSA-4r3h-7hr5-pjx6.