CVE-2009-0654
Severity Score
5.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and an exit router, to confirm that a sender and receiver are communicating via vectors involving (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, and then observing cell recognition errors at the exit router. NOTE: the vendor disputes the significance of this issue, noting that the product's design "accepted end-to-end correlation as an attack that is too expensive to solve."
Tor v0.2.0.28, y posiblemente v0.2.0.34 y anteriores, permite a atacantes remotos, con el control de un enrutador de salida y otro de entrada, confirmar que un receptor y un remitente estan comunicandose a traves de los vectores (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, y despues observar los errores de reconocimiento de celula en el enrutador de salida. NOTA: El vendedor no esta de acuerda con la importancia de este hecho.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-02-20 CVE Reserved
- 2009-02-20 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- 2024-09-17 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://blog.torproject.org/blog/one-cell-enough | X_refsource_misc | |
| http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Fu | X_refsource_misc |
| URL | Date | SRC |
|---|---|---|
| http://www.blackhat.com/presentations/bh-dc-09/Fu/BlackHat-DC-09-Fu-Break-Tors-Anonymity.pdf | 2024-09-17 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | <= 0.2.0.34 Search vendor "Tor" for product "Tor" and version " <= 0.2.0.34" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.1 Search vendor "Tor" for product "Tor" and version "0.2.0.1" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.2 Search vendor "Tor" for product "Tor" and version "0.2.0.2" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.3 Search vendor "Tor" for product "Tor" and version "0.2.0.3" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.4 Search vendor "Tor" for product "Tor" and version "0.2.0.4" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.5 Search vendor "Tor" for product "Tor" and version "0.2.0.5" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.6 Search vendor "Tor" for product "Tor" and version "0.2.0.6" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.7 Search vendor "Tor" for product "Tor" and version "0.2.0.7" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.8 Search vendor "Tor" for product "Tor" and version "0.2.0.8" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.9 Search vendor "Tor" for product "Tor" and version "0.2.0.9" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.10 Search vendor "Tor" for product "Tor" and version "0.2.0.10" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.11 Search vendor "Tor" for product "Tor" and version "0.2.0.11" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.12 Search vendor "Tor" for product "Tor" and version "0.2.0.12" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.13 Search vendor "Tor" for product "Tor" and version "0.2.0.13" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.14 Search vendor "Tor" for product "Tor" and version "0.2.0.14" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.15 Search vendor "Tor" for product "Tor" and version "0.2.0.15" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.16 Search vendor "Tor" for product "Tor" and version "0.2.0.16" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.17 Search vendor "Tor" for product "Tor" and version "0.2.0.17" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.18 Search vendor "Tor" for product "Tor" and version "0.2.0.18" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.19 Search vendor "Tor" for product "Tor" and version "0.2.0.19" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.20 Search vendor "Tor" for product "Tor" and version "0.2.0.20" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.21 Search vendor "Tor" for product "Tor" and version "0.2.0.21" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.22 Search vendor "Tor" for product "Tor" and version "0.2.0.22" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.23 Search vendor "Tor" for product "Tor" and version "0.2.0.23" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.24 Search vendor "Tor" for product "Tor" and version "0.2.0.24" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.25 Search vendor "Tor" for product "Tor" and version "0.2.0.25" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.26 Search vendor "Tor" for product "Tor" and version "0.2.0.26" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.27 Search vendor "Tor" for product "Tor" and version "0.2.0.27" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.28 Search vendor "Tor" for product "Tor" and version "0.2.0.28" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.29 Search vendor "Tor" for product "Tor" and version "0.2.0.29" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.30 Search vendor "Tor" for product "Tor" and version "0.2.0.30" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.31 Search vendor "Tor" for product "Tor" and version "0.2.0.31" | alpha |
Affected
| ||||||
| Tor Search vendor "Tor" | Tor Search vendor "Tor" for product "Tor" | 0.2.0.32 Search vendor "Tor" for product "Tor" and version "0.2.0.32" | alpha |
Affected
| ||||||