[Bug 244502] New: CVE-2007-3165: tor < 0.1.2.14 information disclosure

[bugzilla@xxxxxxxxxx]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244502

           Summary: CVE-2007-3165: tor < 0.1.2.14 information disclosure
           Product: Fedora Extras
           Version: f7
          Platform: All
               URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3165
        OS/Version: Linux
            Status: NEW
          Severity: medium
          Priority: medium
         Component: tor
        AssignedTo: enrico.scholz@xxxxxxxxxxxxxxxxxxxxxxxxx
        ReportedBy: ville.skytta@xxxxxx
         QAContact: extras-qa@xxxxxxxxxxxxxxxxx
                CC: fedora-security-list@xxxxxxxxxx


http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3165

"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the
same family as the exit node, which might compromise the anonymity of traffic
sources and destinations by exposing traffic to inappropriate remote observers."

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

--
Fedora-security-list mailing list
Fedora-security-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-security-list