CVE-2008-5398

CVE-2008-5398 describes a vulnerability in Tor versions prior to 0.2.0.32, where the ClientDNSRejectInternalAddresses configuration option is improperly handled when an exit relay refuses a stream. This flaw allows malicious exit relays to potentially map internal IP addresses to destination hostnames of refused streams, leading to an unknown but potentially significant impact. With a CVSS score of 9.3, this vulnerability is considered critical due to its network attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.