CVE-2006-4508 — Scatterchat vulnerability

5 documents5 sources
Severity
4.0MEDIUMNVD
EPSS
1.3%
top 19.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Torproject TORScatterchatTOR
Timeline
PublishedAug 31
Latest updateMay 1

Description

Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service (flood) via unspecified vectors.

CVSS vector

AV:N/AC:H/C:P/I:N/A:PExploitability: 4.9 | Impact: 4.9

Affected Packages3 packages

▶Debiantorproject/tor< 0.1.1.23-1+3
▶NVDtor/tor39 versions+38

Patches

Patch: archives.seul.org ↗Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-48qc-hgg4-x87r: Unspecified vulnerability in (1) Tor 0↗2022-05-01
▶
CVEList
CVE-2006-4508: Unspecified vulnerability in (1) Tor 0↗2006-08-31
▶
OSV
CVE-2006-4508: Unspecified vulnerability in (1) Tor 0↗2006-08-31
▶

📋Vendor Advisories

1
Debian
CVE-2006-4508: tor - Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before ...↗2006
▶
CVE-2006-4508 — Scatterchat vulnerability | cvebase