CVE-2007-4098

Description

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.

References

http://www.vupen.com/english/advisories/2007/2634

http://www.securityfocus.com/bid/25035

http://secunia.com/advisories/26140

http://osvdb.org/46970

http://archives.seul.org/or/announce/Jul-2007/msg00000.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS