Vulnerability Details CVE-2007-1103
Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.3%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.seul.org/or/talk/Feb-2007/msg00197.html
- http://archives.seul.org/or/talk/Feb-2007/msg00200.html
- http://archives.seul.org/or/talk/Feb-2007/msg00202.html
- http://osvdb.org/45249
- http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf
- http://archives.seul.org/or/talk/Feb-2007/msg00197.html
- http://archives.seul.org/or/talk/Feb-2007/msg00200.html
- http://archives.seul.org/or/talk/Feb-2007/msg00202.html
- http://osvdb.org/45249
- http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf