CVE-2010-0385
N/A
Published: January 25, 2010 at 07:00 PM UTC
Updated: June 16, 2026 at 11:16 PM UTC
1 product affected across 1 vendorTor
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
0.0.20.0.2_pre130.0.2_pre140.0.2_pre150.0.2_pre160.0.2_pre170.0.2_pre180.0.2_pre190.0.2_pre200.0.2_pre210.0.2_pre220.0.2_pre230.0.2_pre240.0.2_pre250.0.2_pre260.0.2_pre270.0.30.0.40.0.50.0.60.0.6.10.0.6.20.0.70.0.7.10.0.7.20.0.7.30.0.80.0.8.10.0.90.0.9.10.0.9.100.0.9.20.0.9.30.0.9.40.0.9.50.0.9.60.0.9.70.0.9.80.0.9.90.1.0.10.1.0.100.1.0.110.1.0.120.1.0.130.1.0.140.1.0.150.1.0.160.1.0.170.1.0.180.1.0.190.1.0.20.1.0.30.1.0.40.1.0.50.1.0.60.1.0.70.1.0.80.1.0.90.1.10.1.1.10.1.1.100.1.1.10_alpha0.1.1.110.1.1.120.1.1.130.1.1.140.1.1.150.1.1.160.1.1.170.1.1.180.1.1.190.1.1.1_alpha0.1.1.20.1.1.200.1.1.210.1.1.220.1.1.230.1.1.250.1.1.260.1.1.2_alpha0.1.1.30.1.1.3_alpha0.1.1.40.1.1.4_alpha0.1.1.50.1.1.5_alpha0.1.1.60.1.1.6_alpha0.1.1.70.1.1.7_alpha0.1.1.80.1.1.8_alpha0.1.1.90.1.1.9_alpha0.1.2.100.1.2.110.1.2.120.1.2.130.1.2.140.1.2.160.1.2.180.1.2.190.1.2.1_alpha-cvs0.1.2.20.1.2.300.1.2.40.1.2.50.1.2.5 alpha0.1.2.7 alpha0.1.2.90.2.1.1.120.2.1.1.130.2.1.1.140.2.1.1.150.2.1.1.160.2.1.1.170.2.1.1.180.2.1.1.190.2.1.1.200.2.1.1.210.2.2.1 alpha0.2.2.2 alpha0.2.2.3 alpha0.2.2.4 alpha0.2.2.5 alpha0.2.2.6 alpha0.2.2.7 alpha
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (5)
Mailing Listx_refsource_MLIST
Source: [email protected]
http://archives.seul.org/or/announce/Jan-2010/msg00000.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://archives.seul.org/or/talk/Jan-2010/msg00162.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/38198Quick Info
StatusMODIFIED
CWE
CWE-200
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card