CVE-2006-3411 — Improper Control of Interaction Frequency in TOR
5 documents5 sources
Severity
6.4MEDIUMNVD
EPSS
0.3%
top 50.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 7
Latest updateMay 1
Description
TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys.
CVSS vector
AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9
Affected Packages2 packages
Patches
🔴Vulnerability Details
3📋Vendor Advisories
1Debian▶
CVE-2006-3411: tor - TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS ...↗2006