CVE-2010-0385: Infoleak

Published Jan 25, 2010

Updated

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.

Affected Software

127 affected components

Tor (The Onion Router)=0.0.2

Tor (The Onion Router)=0.0.2_pre13

Tor (The Onion Router)=0.0.2_pre14

Tor (The Onion Router)=0.0.2_pre15

Tor (The Onion Router)=0.0.2_pre16

Tor (The Onion Router)=0.0.2_pre17

Tor (The Onion Router)=0.0.2_pre18

Tor (The Onion Router)=0.0.2_pre19

Tor (The Onion Router)=0.0.2_pre20

Tor (The Onion Router)=0.0.2_pre21

Tor (The Onion Router)=0.0.2_pre22

Tor (The Onion Router)=0.0.2_pre23

Tor (The Onion Router)=0.0.2_pre24

Tor (The Onion Router)=0.0.2_pre25

Tor (The Onion Router)=0.0.2_pre26

Tor (The Onion Router)=0.0.2_pre27

Tor (The Onion Router)=0.0.3

Tor (The Onion Router)=0.0.4

Tor (The Onion Router)=0.0.5

Tor (The Onion Router)=0.0.6

Tor (The Onion Router)=0.0.6.1

Tor (The Onion Router)=0.0.6.2

Tor (The Onion Router)=0.0.7

Tor (The Onion Router)=0.0.7.1

Tor (The Onion Router)=0.0.7.2

Tor (The Onion Router)=0.0.7.3

Tor (The Onion Router)=0.0.8

Tor (The Onion Router)=0.0.8.1

Tor (The Onion Router)=0.0.9

Tor (The Onion Router)=0.0.9.1

Tor (The Onion Router)=0.0.9.2

Tor (The Onion Router)=0.0.9.3

Tor (The Onion Router)=0.0.9.4

Tor (The Onion Router)=0.0.9.5

Tor (The Onion Router)=0.0.9.6

Tor (The Onion Router)=0.0.9.7

Tor (The Onion Router)=0.0.9.8

Tor (The Onion Router)=0.0.9.9

Tor (The Onion Router)=0.0.9.10

Tor (The Onion Router)=0.1.0.1

Tor (The Onion Router)=0.1.0.2

Tor (The Onion Router)=0.1.0.3

Tor (The Onion Router)=0.1.0.4

Tor (The Onion Router)=0.1.0.5

Tor (The Onion Router)=0.1.0.6

Tor (The Onion Router)=0.1.0.7

Tor (The Onion Router)=0.1.0.8

Tor (The Onion Router)=0.1.0.9

Tor (The Onion Router)=0.1.0.10

Tor (The Onion Router)=0.1.0.11

Tor (The Onion Router)=0.1.0.12

Tor (The Onion Router)=0.1.0.13

Tor (The Onion Router)=0.1.0.14

Tor (The Onion Router)=0.1.0.15

Tor (The Onion Router)=0.1.0.16

Tor (The Onion Router)=0.1.0.17

Tor (The Onion Router)=0.1.0.18

Tor (The Onion Router)=0.1.0.19

Tor (The Onion Router)=0.1.1

Tor (The Onion Router)=0.1.1.1

Tor (The Onion Router)=0.1.1.1_alpha

Tor (The Onion Router)=0.1.1.2

Tor (The Onion Router)=0.1.1.2_alpha

Tor (The Onion Router)=0.1.1.3

Tor (The Onion Router)=0.1.1.3_alpha

Tor (The Onion Router)=0.1.1.4

Tor (The Onion Router)=0.1.1.4_alpha

Tor (The Onion Router)=0.1.1.5

Tor (The Onion Router)=0.1.1.5_alpha

Tor (The Onion Router)=0.1.1.6

Tor (The Onion Router)=0.1.1.6_alpha

Tor (The Onion Router)=0.1.1.7

Tor (The Onion Router)=0.1.1.7_alpha

Tor (The Onion Router)=0.1.1.8

Tor (The Onion Router)=0.1.1.8_alpha

Tor (The Onion Router)=0.1.1.9

Tor (The Onion Router)=0.1.1.9_alpha

Tor (The Onion Router)=0.1.1.10

Tor (The Onion Router)=0.1.1.10_alpha

Tor (The Onion Router)=0.1.1.11

Tor (The Onion Router)=0.1.1.12

Tor (The Onion Router)=0.1.1.13

Tor (The Onion Router)=0.1.1.14

Tor (The Onion Router)=0.1.1.15

Tor (The Onion Router)=0.1.1.16

Tor (The Onion Router)=0.1.1.17

Tor (The Onion Router)=0.1.1.18

Tor (The Onion Router)=0.1.1.19

Tor (The Onion Router)=0.1.1.20

Tor (The Onion Router)=0.1.1.21

Tor (The Onion Router)=0.1.1.22

Tor (The Onion Router)=0.1.1.23

Tor (The Onion Router)=0.1.1.25

Tor (The Onion Router)=0.1.1.26

Tor (The Onion Router)=0.1.2.1_alpha-cvs

Tor (The Onion Router)=0.1.2.2

Tor (The Onion Router)=0.1.2.4

Tor (The Onion Router)=0.1.2.5

Tor (The Onion Router)=0.1.2.5-alpha

Tor (The Onion Router)=0.1.2.7-alpha

Tor (The Onion Router)=0.1.2.9

Tor (The Onion Router)=0.1.2.10

Tor (The Onion Router)=0.1.2.11

Tor (The Onion Router)=0.1.2.12

Tor (The Onion Router)=0.1.2.13

Tor (The Onion Router)=0.1.2.14

Tor (The Onion Router)=0.1.2.16

Tor (The Onion Router)=0.1.2.18

Tor (The Onion Router)=0.1.2.19

Tor (The Onion Router)=0.1.2.30

Tor (The Onion Router)=0.2.1.1.12

Tor (The Onion Router)=0.2.1.1.13

Tor (The Onion Router)=0.2.1.1.14

Tor (The Onion Router)=0.2.1.1.15

Tor (The Onion Router)=0.2.1.1.16

Tor (The Onion Router)=0.2.1.1.17

Tor (The Onion Router)=0.2.1.1.18

Tor (The Onion Router)=0.2.1.1.19

Tor (The Onion Router)=0.2.1.1.20

Tor (The Onion Router)=0.2.1.1.21

Tor (The Onion Router)=0.2.2.1-alpha

Tor (The Onion Router)=0.2.2.2-alpha

Tor (The Onion Router)=0.2.2.3-alpha

Tor (The Onion Router)=0.2.2.4-alpha

Tor (The Onion Router)=0.2.2.5-alpha

Tor (The Onion Router)=0.2.2.6-alpha

Tor (The Onion Router)=0.2.2.7-alpha

Event History

Jan 25, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0385?

CVE-2010-0385 has a moderate severity rating as it allows remote attackers to obtain sensitive information that could be used for further exploitation.

How do I fix CVE-2010-0385?

To mitigate CVE-2010-0385, users should upgrade to Tor version 0.2.1.22 or 0.2.2.7-alpha or later.

What are the affected versions by CVE-2010-0385?

CVE-2010-0385 affects Tor versions before 0.2.1.22 and 0.2.2.x before 0.2.2.7-alpha.

What type of vulnerability is CVE-2010-0385?

CVE-2010-0385 is classified as an information disclosure vulnerability allowing remote attackers access to sensitive bridge information.

Who can be impacted by CVE-2010-0385?

Users running affected versions of Tor as bridge directory authorities are at risk from CVE-2010-0385.