New subject: [Bug 244502] CVE-2007-3165: tor < 0.1.2.14 information disclosure

16 Jun 2007


      Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244502
Summary: CVE-2007-3165: tor < 0.1.2.14 information disclosure
           Product: Fedora Extras
           Version: f7
          Platform: All
               URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3165
        OS/Version: Linux
            Status: NEW
          Severity: medium
          Priority: medium
         Component: tor
        AssignedTo: enrico.scholz@informatik.tu-chemnitz.de
        ReportedBy: ville.skytta@iki.fi
         QAContact: extras-qa@fedoraproject.org
                CC: fedora-security-list@redhat.com
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3165
"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the
same family as the exit node, which might compromise the anonymity of traffic
sources and destinations by exposing traffic to inappropriate remote observers."
-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 244502] New: CVE-2007-3165: tor < 0.1.2.14 information disclosure