Lucene search

K
cve[email protected]CVE-2006-3412
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2006-3412

2022-10-0316:21:14
web.nvd.nist.gov
18
cve-2006-3412
tor
firewall bypass
vulnerability
nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers.

Affected configurations

NVD
Node
tortorMatch0.0.2
OR
tortorMatch0.0.2_pre13
OR
tortorMatch0.0.2_pre14
OR
tortorMatch0.0.2_pre15
OR
tortorMatch0.0.2_pre16
OR
tortorMatch0.0.2_pre17
OR
tortorMatch0.0.2_pre18
OR
tortorMatch0.0.2_pre19
OR
tortorMatch0.0.2_pre20
OR
tortorMatch0.0.2_pre21
OR
tortorMatch0.0.2_pre22
OR
tortorMatch0.0.2_pre23
OR
tortorMatch0.0.2_pre24
OR
tortorMatch0.0.2_pre25
OR
tortorMatch0.0.2_pre26
OR
tortorMatch0.0.2_pre27
OR
tortorMatch0.0.3
OR
tortorMatch0.0.4
OR
tortorMatch0.0.5
OR
tortorMatch0.0.6
OR
tortorMatch0.0.6.1
OR
tortorMatch0.0.6.2
OR
tortorMatch0.0.7
OR
tortorMatch0.0.7.1
OR
tortorMatch0.0.7.2
OR
tortorMatch0.0.7.3
OR
tortorMatch0.0.8
OR
tortorMatch0.0.8.1
OR
tortorMatch0.0.9
OR
tortorMatch0.0.9.1
OR
tortorMatch0.0.9.2
OR
tortorMatch0.0.9.3
OR
tortorMatch0.0.9.4
OR
tortorMatch0.0.9.5
OR
tortorMatch0.0.9.6
OR
tortorMatch0.0.9.7
OR
tortorMatch0.0.9.8
OR
tortorMatch0.0.9.9
OR
tortorMatch0.0.9.10
OR
tortorMatch0.1.0.1
OR
tortorMatch0.1.0.2
OR
tortorMatch0.1.0.3
OR
tortorMatch0.1.0.4
OR
tortorMatch0.1.0.5
OR
tortorMatch0.1.0.6
OR
tortorMatch0.1.0.7
OR
tortorMatch0.1.0.8
OR
tortorMatch0.1.0.9
OR
tortorMatch0.1.0.10
OR
tortorMatch0.1.0.11
OR
tortorMatch0.1.0.12
OR
tortorMatch0.1.0.13
OR
tortorMatch0.1.0.14
OR
tortorMatch0.1.0.15
OR
tortorMatch0.1.0.16
OR
tortorMatch0.1.0.17
OR
tortorMatch0.1.0.18
OR
tortorMatch0.1.0.19
OR
tortorMatch0.1.1.1_alpha
OR
tortorMatch0.1.1.2_alpha
OR
tortorMatch0.1.1.3_alpha
OR
tortorMatch0.1.1.4_alpha
OR
tortorMatch0.1.1.5_alpha
OR
tortorMatch0.1.1.6_alpha
OR
tortorMatch0.1.1.7_alpha
OR
tortorMatch0.1.1.8_alpha
OR
tortorMatch0.1.1.9_alpha
OR
tortorMatch0.1.1.10_alpha

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

Related for CVE-2006-3412