CVE-2005-2643

Publication date 23 August 2005

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.

Status

Package Ubuntu Release Status
tor 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected