What’s Vulnerable › Vulnerabilities

CVE-2010-0383

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-01-25 · updated 2026-06-16
• Weakness: CWE-200

Description

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.

Affected products

• Tor: 0.0.2, 0.0.2_pre13, 0.0.2_pre14, 0.0.2_pre15, 0.0.2_pre16, 0.0.2_pre17 (+121)

References

• http://archives.seul.org/or/announce/Jan-2010/msg00000.html
• http://archives.seul.org/or/talk/Jan-2010/msg00161.html
• http://archives.seul.org/or/talk/Jan-2010/msg00162.html
• http://archives.seul.org/or/talk/Jan-2010/msg00165.html
• http://osvdb.org/61977
• http://secunia.com/advisories/38198
• http://www.securityfocus.com/bid/37901
• http://archives.seul.org/or/announce/Jan-2010/msg00000.html
• http://archives.seul.org/or/talk/Jan-2010/msg00161.html
• http://archives.seul.org/or/talk/Jan-2010/msg00162.html
• http://archives.seul.org/or/talk/Jan-2010/msg00165.html
• http://osvdb.org/61977

Get alerted when CVE-2010-0383 or the next vulnerability affects your stack