CVE-2008-5397
Summary
| CVE | CVE-2008-5397 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-12-09 00:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:L/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tor | Tor | 0.0.2 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre13 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre14 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre15 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre16 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre17 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre18 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre19 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre20 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre21 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre22 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre23 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre24 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre25 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre26 | All | All | All |
| Application | Tor | Tor | 0.0.2_pre27 | All | All | All |
| Application | Tor | Tor | 0.0.3 | All | All | All |
| Application | Tor | Tor | 0.0.4 | All | All | All |
| Application | Tor | Tor | 0.0.5 | All | All | All |
| Application | Tor | Tor | 0.0.6 | All | All | All |
| Application | Tor | Tor | 0.0.6.1 | All | All | All |
| Application | Tor | Tor | 0.0.6.2 | All | All | All |
| Application | Tor | Tor | 0.0.7 | All | All | All |
| Application | Tor | Tor | 0.0.7.1 | All | All | All |
| Application | Tor | Tor | 0.0.7.2 | All | All | All |
| Application | Tor | Tor | 0.0.7.3 | All | All | All |
| Application | Tor | Tor | 0.0.8 | All | All | All |
| Application | Tor | Tor | 0.0.8.1 | All | All | All |
| Application | Tor | Tor | 0.0.9 | All | All | All |
| Application | Tor | Tor | 0.0.9.1 | All | All | All |
| Application | Tor | Tor | 0.0.9.10 | All | All | All |
| Application | Tor | Tor | 0.0.9.2 | All | All | All |
| Application | Tor | Tor | 0.0.9.3 | All | All | All |
| Application | Tor | Tor | 0.0.9.4 | All | All | All |
| Application | Tor | Tor | 0.0.9.5 | All | All | All |
| Application | Tor | Tor | 0.0.9.6 | All | All | All |
| Application | Tor | Tor | 0.0.9.7 | All | All | All |
| Application | Tor | Tor | 0.0.9.8 | All | All | All |
| Application | Tor | Tor | 0.0.9.9 | All | All | All |
| Application | Tor | Tor | 0.1.0.1 | All | All | All |
| Application | Tor | Tor | 0.1.0.10 | All | All | All |
| Application | Tor | Tor | 0.1.0.11 | All | All | All |
| Application | Tor | Tor | 0.1.0.12 | All | All | All |
| Application | Tor | Tor | 0.1.0.13 | All | All | All |
| Application | Tor | Tor | 0.1.0.14 | All | All | All |
| Application | Tor | Tor | 0.1.0.15 | All | All | All |
| Application | Tor | Tor | 0.1.0.16 | All | All | All |
| Application | Tor | Tor | 0.1.0.17 | All | All | All |
| Application | Tor | Tor | 0.1.0.18 | All | All | All |
| Application | Tor | Tor | 0.1.0.19 | All | All | All |
| Application | Tor | Tor | 0.1.0.2 | All | All | All |
| Application | Tor | Tor | 0.1.0.3 | All | All | All |
| Application | Tor | Tor | 0.1.0.4 | All | All | All |
| Application | Tor | Tor | 0.1.0.5 | All | All | All |
| Application | Tor | Tor | 0.1.0.6 | All | All | All |
| Application | Tor | Tor | 0.1.0.7 | All | All | All |
| Application | Tor | Tor | 0.1.0.8 | All | All | All |
| Application | Tor | Tor | 0.1.0.9 | All | All | All |
| Application | Tor | Tor | 0.1.1.1 | All | All | All |
| Application | Tor | Tor | 0.1.1.10 | All | All | All |
| Application | Tor | Tor | 0.1.1.10_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.11 | All | All | All |
| Application | Tor | Tor | 0.1.1.12 | All | All | All |
| Application | Tor | Tor | 0.1.1.13 | All | All | All |
| Application | Tor | Tor | 0.1.1.14 | All | All | All |
| Application | Tor | Tor | 0.1.1.15 | All | All | All |
| Application | Tor | Tor | 0.1.1.16 | All | All | All |
| Application | Tor | Tor | 0.1.1.17 | All | All | All |
| Application | Tor | Tor | 0.1.1.18 | All | All | All |
| Application | Tor | Tor | 0.1.1.19 | All | All | All |
| Application | Tor | Tor | 0.1.1.1_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.2 | All | All | All |
| Application | Tor | Tor | 0.1.1.20 | All | All | All |
| Application | Tor | Tor | 0.1.1.21 | All | All | All |
| Application | Tor | Tor | 0.1.1.22 | All | All | All |
| Application | Tor | Tor | 0.1.1.23 | All | All | All |
| Application | Tor | Tor | 0.1.1.26 | All | All | All |
| Application | Tor | Tor | 0.1.1.2_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.3 | All | All | All |
| Application | Tor | Tor | 0.1.1.3_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.4 | All | All | All |
| Application | Tor | Tor | 0.1.1.4_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.5 | All | All | All |
| Application | Tor | Tor | 0.1.1.5_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.6 | All | All | All |
| Application | Tor | Tor | 0.1.1.6_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.7 | All | All | All |
| Application | Tor | Tor | 0.1.1.7_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.8 | All | All | All |
| Application | Tor | Tor | 0.1.1.8_alpha | All | All | All |
| Application | Tor | Tor | 0.1.1.9 | All | All | All |
| Application | Tor | Tor | 0.1.1.9_alpha | All | All | All |
| Application | Tor | Tor | 0.1.2.14 | All | All | All |
| Application | Tor | Tor | 0.1.2.15 | All | All | All |
| Application | Tor | Tor | 0.1.2.17 | All | All | All |
| Application | Tor | Tor | 0.1.2.18 | All | All | All |
| Application | Tor | Tor | 0.1.2.19 | All | All | All |
| Application | Tor | Tor | 0.1.2.1_alpha-cvs | All | All | All |
| Application | Tor | Tor | 0.1.2.30 | All | All | All |
| Application | Tor | Tor | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Gentoo update for tor - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Tor Security Bypass And Privilege Escalation Weaknesses | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch |
| Gentoo Linux Documentation -- Tor: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Tor Two Weaknesses - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Tor 0.2.0.32 Released | The Tor Blog | af854a3a-2127-422b-91ae-364da2661108 | blog.torproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.