VYPR
Unrated severityNVD Advisory· Published Jul 30, 2007· Updated Jun 16, 2026

CVE-2007-4099

CVE-2007-4099

Description

Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Tor/Tor15 versions
    cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*
    • cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*
  • Torproject/Torllm-create
    Range: <0.1.2.15

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.