CVE-2011-2768
N/A
N/A
Summary
Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://blog.torproject.org/blog/tor-02234-released-security-patches
- http://www.debian.org/security/2011/dsa-2331
References
- https://blog.torproject.org/blog/tor-02234-released-security-patches
- http://www.debian.org/security/2011/dsa-2331
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.