Unrated severityNVD Advisory· Published Feb 26, 2007· Updated Jun 16, 2026

CVE-2007-1103

Description

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tor/Tor2 versions
cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*range: <=0.1.1.26
- (no CPE)

Patches

Vulnerability mechanics

References

archives.seul.org/or/talk/Feb-2007/msg00197.htmlnvd
archives.seul.org/or/talk/Feb-2007/msg00200.htmlnvd
archives.seul.org/or/talk/Feb-2007/msg00202.htmlnvd
osvdb.org/45249nvd
www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000