CVE-2007-4099

no score yetEPSS 1.9%

Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2007-07-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

tor:tor

References

http://archives.seul.org/or/announce/Jul-2007/msg00000.html
http://osvdb.org/46971
http://secunia.com/advisories/26140
http://www.securityfocus.com/bid/25035
http://www.vupen.com/english/advisories/2007/2634

Check your stack JSON