← Database

CVE-2005-2643

MEDIUM CVSS: 5.0 Published: 2005-08-23 Modified: 2026-06-16

Description

Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.

Affected Platforms

Tor Tor

Weakness Type

NVD-CWE-Other

References