CVE-2006-3414
published 2006-07-07CVE-2006-3414: Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by…
PriorityP422medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.11%
79.7th percentile
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.
Affected
73 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tor | < tor 0.1.1.20-1 (bookworm) | tor 0.1.1.20-1 (bookworm) |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8gg9-64gx-fjcc: Tor before 0
ghsa_unreviewed·2022-05-01
CVE-2006-3414 [MEDIUM] GHSA-8gg9-64gx-fjcc: Tor before 0
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.
OSV
CVE-2006-3414: Tor before 0
osv·2006-07-07·CVSS 5.0
CVE-2006-3414 [MEDIUM] CVE-2006-3414: Tor before 0
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.
Debian
CVE-2006-3414: tor - Tor before 0.1.1.20 supports server descriptors that contain hostnames instead o...
vendor_debian·2006·CVSS 5.0
CVE-2006-3414 [MEDIUM] CVE-2006-3414: tor - Tor before 0.1.1.20 supports server descriptors that contain hostnames instead o...
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.
Scope: local
bookworm: resolved (fixed in 0.1.1.20-1)
bullseye: resolved (fixed in 0.1.1.20-1)
forky: resolved (fixed in 0.1.1.20-1)
sid: resolved (fixed in 0.1.1.20-1)
trixie: resolved (fixed in 0.1.1.20-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2006-07-07
Published