CVE-2005-2050

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.seul.org/or/announce/Jun-2005/msg00001.htmlPatch
http://bugs.gentoo.org/show_bug.cgi?id=96320Patch
http://secunia.com/advisories/15764/Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200506-18.xmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/21093
http://archives.seul.org/or/announce/Jun-2005/msg00001.htmlPatch
http://bugs.gentoo.org/show_bug.cgi?id=96320Patch
http://secunia.com/advisories/15764/Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200506-18.xmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/21093

Timeline

Published: Jun 28, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-20517.5Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 allows remote attackers to exe CVE-2005-20525.1Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and R CVE-2005-20535.0Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id CVE-2005-20545.1Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitra CVE-2005-20555.0RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbit CVE-2005-20562.6The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application CVE-2005-20576.8Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web CVE-2005-20587.5Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via CVE-2005-20596.5Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) remove CVE-2005-20605.0Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads b CVE-2005-20615.0Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by CVE-2005-20627.5Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parame