CVE-2005-2643
EPSS 0.41%Published: 8/23/2005Modified: 4/28/2026
Description
Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.
Affected packages (1)
- Debian/torfrom 0, < 0.1.0.14-1