CVE
- Id
- 13849
- CVE No.
- CVE-2005-2643
- Status
- Candidate
- Description
- Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.
- Phase
- Assigned (20050821)
- Votes
- None (candidate not yet proposed)
- Comments