CVE-2007-3165

CVE-2007-3165 describes a vulnerability in Tor versions prior to 0.1.2.14, where the circuit construction logic could inadvertently place an entry guard and exit node from the same family. This flaw could compromise user anonymity by allowing a single entity to observe both traffic sources and destinations. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), it indicates a network-exploitable vulnerability with low attack complexity, requiring no authentication, and potentially leading to a partial compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.