NVD

Id
53311  
Name
CVE-2007-1103  
Description
Tor does not verify a node"s uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-02-26  
Modified Date
2008-11-15  
Seq
2007-1103  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269949 53311 CVE-2007-1103 [or-talk] 20070225 "Low-Resource Routing Attacks Against Anonymous Systems"  View
269950 53311 CVE-2007-1103 [or-talk] 20070225 Re: "Low-Resource Routing Attacks Against Anonymous Systems"  View
269951 53311 CVE-2007-1103 [or-talk] 20070225 Re: ISP controlling entry/exti ("Low-Resource Routing Attacks Against Anonymous Systems")  View
269952 53311 CVE-2007-1103 http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56451 JVNDB-2007-005143 Tor における超過リソースを不当要求される脆弱性 Tor は、ノードの可用時間および帯域幅広告を検証しないため、超過リソースを不当要求され、多くの回線で使用される位置にノードを配置され、またはトラフィック送信元および送信先の匿名性を侵害される脆弱性が存在します。 CVE-2007-1103 24458 CVE-2007-1103 53311 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005143.html 2007-02-26 2012-12-20 View