CVE-2009-0654

CVE-2009-0654 describes a vulnerability in Tor versions 0.2.0.28 and likely earlier, where an attacker controlling both entry and exit routers could confirm communication between a sender and receiver. This is achieved by manipulating single cells and observing resulting recognition errors. The vulnerability has a CVSS score of 5.1, indicating a network-based attack with high access complexity and partial impact on confidentiality, integrity, and availability. Despite the vendor downplaying its significance, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.