CVE-2011-4895

Description

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.

Affected packages (1)

• Debian/torfrom 0, < 0.2.2.34-1

References (1)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-4895