CVE-2006-3407
published 2006-07-07CVE-2006-3407: Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
PriorityP425medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
1.50%
71.3th percentile
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
Affected
73 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tor | < tor 0.1.1.20-1 (bookworm) | tor 0.1.1.20-1 (bookworm) |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
osv6.4MEDIUM
vendor_debian6.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-93m4-v97h-82q2: Tor before 0
ghsa_unreviewed·2022-05-01
CVE-2006-3407 [MEDIUM] GHSA-93m4-v97h-82q2: Tor before 0
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
OSV
CVE-2006-3407: Tor before 0
osv·2006-07-07·CVSS 6.4
CVE-2006-3407 [MEDIUM] CVE-2006-3407: Tor before 0
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
Debian
CVE-2006-3407: tor - Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly exe...
vendor_debian·2006·CVSS 6.4
CVE-2006-3407 [MEDIUM] CVE-2006-3407: tor - Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly exe...
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
Scope: local
bookworm: resolved (fixed in 0.1.1.20-1)
bullseye: resolved (fixed in 0.1.1.20-1)
forky: resolved (fixed in 0.1.1.20-1)
sid: resolved (fixed in 0.1.1.20-1)
trixie: resolved (fixed in 0.1.1.20-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/20277http://secunia.com/advisories/20514http://security.gentoo.org/glsa/glsa-200606-04.xmlhttp://tor.eff.org/cvs/tor/ChangeLoghttp://www.securityfocus.com/bid/19795https://exchange.xforce.ibmcloud.com/vulnerabilities/26793http://secunia.com/advisories/20277http://secunia.com/advisories/20514http://security.gentoo.org/glsa/glsa-200606-04.xmlhttp://tor.eff.org/cvs/tor/ChangeLoghttp://www.securityfocus.com/bid/19795https://exchange.xforce.ibmcloud.com/vulnerabilities/26793
2006-07-07
Published