CVE-2011-4894 | BDVDB-2026-48580 Detail

Description#

Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12011-12-23Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.