Information Disclosure Vulnerability in Tor Relay Configuration

CVE-2011-4897 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value.

Learn more about our Web Application Penetration Testing UK.