NetSight
medium4.3

CVE-2011-4897

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows re…

Impact

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value.

Affected products

VendorProductAffected versions
TorTor
through 0.2.2.24
Versions 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6

Weakness classification

References