CVE-2010-0383: Infoleak

Published Jan 25, 2010

Updated

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.

Affected Software

127 affected components

Tor (The Onion Router)=0.1.1.1_alpha

Tor (The Onion Router)=0.2.1.1.14

Tor (The Onion Router)=0.1.1.6

Tor (The Onion Router)=0.1.1.9

Tor (The Onion Router)=0.0.6.2

Tor (The Onion Router)=0.2.1.1.12

Tor (The Onion Router)=0.1.2.1_alpha-cvs

Tor (The Onion Router)=0.1.0.18

Tor (The Onion Router)=0.0.2_pre24

Tor (The Onion Router)=0.2.1.1.16

Tor (The Onion Router)=0.0.2_pre16

Tor (The Onion Router)=0.2.2.5-alpha

Tor (The Onion Router)=0.1.1.23

Tor (The Onion Router)=0.0.5

Tor (The Onion Router)=0.1.0.7

Tor (The Onion Router)=0.0.9.8

Tor (The Onion Router)=0.0.9.10

Tor (The Onion Router)=0.1.1.19

Tor (The Onion Router)=0.1.2.18

Tor (The Onion Router)=0.0.9.2

Tor (The Onion Router)=0.1.2.10

Tor (The Onion Router)=0.0.7

Tor (The Onion Router)=0.1.0.10

Tor (The Onion Router)=0.1.2.9

Tor (The Onion Router)=0.0.9

Tor (The Onion Router)=0.1.0.8

Tor (The Onion Router)=0.2.1.1.18

Tor (The Onion Router)=0.2.1.1.17

Tor (The Onion Router)=0.0.9.5

Tor (The Onion Router)=0.1.0.12

Tor (The Onion Router)=0.0.9.3

Tor (The Onion Router)=0.1.2.5

Tor (The Onion Router)=0.1.2.16

Tor (The Onion Router)=0.0.2_pre17

Tor (The Onion Router)=0.1.1.26

Tor (The Onion Router)=0.0.8

Tor (The Onion Router)=0.2.2.1-alpha

Tor (The Onion Router)=0.0.9.9

Tor (The Onion Router)=0.1.1.3_alpha

Tor (The Onion Router)=0.1.1.17

Tor (The Onion Router)=0.1.0.5

Tor (The Onion Router)=0.1.2.14

Tor (The Onion Router)=0.1.0.2

Tor (The Onion Router)=0.1.0.1

Tor (The Onion Router)=0.1.1.2

Tor (The Onion Router)=0.0.2_pre19

Tor (The Onion Router)=0.0.2_pre23

Tor (The Onion Router)=0.1.1.8

Tor (The Onion Router)=0.0.2_pre14

Tor (The Onion Router)=0.1.1.5

Tor (The Onion Router)=0.1.0.13

Tor (The Onion Router)=0.1.0.19

Tor (The Onion Router)=0.2.2.6-alpha

Tor (The Onion Router)=0.1.0.3

Tor (The Onion Router)=0.0.7.1

Tor (The Onion Router)=0.0.6

Tor (The Onion Router)=0.1.1.10_alpha

Tor (The Onion Router)=0.0.2_pre26

Tor (The Onion Router)=0.1.0.14

Tor (The Onion Router)=0.1.1.12

Tor (The Onion Router)=0.1.1.16

Tor (The Onion Router)=0.0.3

Tor (The Onion Router)=0.1.1.18

Tor (The Onion Router)=0.0.9.4

Tor (The Onion Router)=0.1.1.15

Tor (The Onion Router)=0.1.1.4_alpha

Tor (The Onion Router)=0.1.1.21

Tor (The Onion Router)=0.0.2_pre22

Tor (The Onion Router)=0.0.2_pre21

Tor (The Onion Router)=0.1.2.4

Tor (The Onion Router)=0.1.2.11

Tor (The Onion Router)=0.1.0.15

Tor (The Onion Router)=0.1.2.19

Tor (The Onion Router)=0.1.2.7-alpha

Tor (The Onion Router)=0.0.6.1

Tor (The Onion Router)=0.2.1.1.19

Tor (The Onion Router)=0.2.1.1.13

Tor (The Onion Router)=0.0.2

Tor (The Onion Router)=0.2.2.3-alpha

Tor (The Onion Router)=0.1.1.14

Tor (The Onion Router)=0.2.2.2-alpha

Tor (The Onion Router)=0.1.0.6

Tor (The Onion Router)=0.1.1.3

Tor (The Onion Router)=0.2.1.1.21

Tor (The Onion Router)=0.1.1.7_alpha

Tor (The Onion Router)=0.0.2_pre13

Tor (The Onion Router)=0.1.1.6_alpha

Tor (The Onion Router)=0.1.0.9

Tor (The Onion Router)=0.1.1

Tor (The Onion Router)=0.1.1.22

Tor (The Onion Router)=0.1.2.2

Tor (The Onion Router)=0.0.7.3

Tor (The Onion Router)=0.0.7.2

Tor (The Onion Router)=0.1.2.13

Tor (The Onion Router)=0.1.1.2_alpha

Tor (The Onion Router)=0.1.1.1

Tor (The Onion Router)=0.1.0.16

Tor (The Onion Router)=0.0.9.1

Tor (The Onion Router)=0.1.1.10

Tor (The Onion Router)=0.2.2.4-alpha

Tor (The Onion Router)=0.0.2_pre18

Tor (The Onion Router)=0.2.2.7-alpha

Tor (The Onion Router)=0.0.2_pre27

Tor (The Onion Router)=0.0.9.7

Tor (The Onion Router)=0.1.1.20

Tor (The Onion Router)=0.1.0.17

Tor (The Onion Router)=0.1.1.7

Tor (The Onion Router)=0.0.8.1

Tor (The Onion Router)=0.0.4

Tor (The Onion Router)=0.0.2_pre25

Tor (The Onion Router)=0.2.1.1.20

Tor (The Onion Router)=0.1.1.25

Tor (The Onion Router)=0.1.0.4

Tor (The Onion Router)=0.0.9.6

Tor (The Onion Router)=0.1.1.13

Tor (The Onion Router)=0.1.1.8_alpha

Tor (The Onion Router)=0.2.1.1.15

Tor (The Onion Router)=0.1.2.30

Tor (The Onion Router)=0.1.1.9_alpha

Tor (The Onion Router)=0.1.1.5_alpha

Tor (The Onion Router)=0.1.0.11

Tor (The Onion Router)=0.1.1.11

Tor (The Onion Router)=0.0.2_pre15

Tor (The Onion Router)=0.0.2_pre20

Tor (The Onion Router)=0.1.2.12

Tor (The Onion Router)=0.1.2.5-alpha

Tor (The Onion Router)=0.1.1.4

Event History

Jan 25, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0383?

CVE-2010-0383 is classified as a medium severity vulnerability.

How do I fix CVE-2010-0383?

To mitigate CVE-2010-0383, update to a version of Tor that is 0.2.2.7-alpha or later.

What impact does CVE-2010-0383 have on Tor users?

CVE-2010-0383 can compromise the anonymity of traffic sources and destinations, making users vulnerable to man-in-the-middle attacks.

Which versions of Tor are affected by CVE-2010-0383?

CVE-2010-0383 affects Tor versions before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha.

Is it safe to use affected versions of Tor mentioned in CVE-2010-0383?

Using affected versions of Tor poses security risks, and users should upgrade to a patched version.