Lucene search
MitreCVE-2006-3418HistoryJul 07, 2006 - 12:05 a.m.
CVE-2006-3418
2006-07-0700:05:00
mitre
web.nvd.nist.gov
24
cve-2006-3418
tor
server descriptor
fingerprint spoofing
vulnerability
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.007
Percentile
80.7%
Tor before 0.1.1.20 does not validate that a server descriptor’s fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications.
Affected configurations
Node
tortorMatch0.0.2
ORtortorMatch0.0.2_pre13
ORtortorMatch0.0.2_pre14
ORtortorMatch0.0.2_pre15
ORtortorMatch0.0.2_pre16
ORtortorMatch0.0.2_pre17
ORtortorMatch0.0.2_pre18
ORtortorMatch0.0.2_pre19
ORtortorMatch0.0.2_pre20
ORtortorMatch0.0.2_pre21
ORtortorMatch0.0.2_pre22
ORtortorMatch0.0.2_pre23
ORtortorMatch0.0.2_pre24
ORtortorMatch0.0.2_pre25
ORtortorMatch0.0.2_pre26
ORtortorMatch0.0.2_pre27
ORtortorMatch0.0.3
ORtortorMatch0.0.4
ORtortorMatch0.0.5
ORtortorMatch0.0.6
ORtortorMatch0.0.6.1
ORtortorMatch0.0.6.2
ORtortorMatch0.0.7
ORtortorMatch0.0.7.1
ORtortorMatch0.0.7.2
ORtortorMatch0.0.7.3
ORtortorMatch0.0.8
ORtortorMatch0.0.8.1
ORtortorMatch0.0.9
ORtortorMatch0.0.9.1
ORtortorMatch0.0.9.2
ORtortorMatch0.0.9.3
ORtortorMatch0.0.9.4
ORtortorMatch0.0.9.5
ORtortorMatch0.0.9.6
ORtortorMatch0.0.9.7
ORtortorMatch0.0.9.8
ORtortorMatch0.0.9.9
ORtortorMatch0.0.9.10
ORtortorMatch0.1.0.1
ORtortorMatch0.1.0.2
ORtortorMatch0.1.0.3
ORtortorMatch0.1.0.4
ORtortorMatch0.1.0.5
ORtortorMatch0.1.0.6
ORtortorMatch0.1.0.7
ORtortorMatch0.1.0.8
ORtortorMatch0.1.0.9
ORtortorMatch0.1.0.10
ORtortorMatch0.1.0.11
ORtortorMatch0.1.0.12
ORtortorMatch0.1.0.13
ORtortorMatch0.1.0.14
ORtortorMatch0.1.0.15
ORtortorMatch0.1.0.16
ORtortorMatch0.1.0.17
ORtortorMatch0.1.0.18
ORtortorMatch0.1.0.19
ORtortorMatch0.1.1.1_alpha
ORtortorMatch0.1.1.2_alpha
ORtortorMatch0.1.1.3_alpha
ORtortorMatch0.1.1.4_alpha
ORtortorMatch0.1.1.5_alpha
ORtortorMatch0.1.1.6_alpha
ORtortorMatch0.1.1.7_alpha
ORtortorMatch0.1.1.8_alpha
ORtortorMatch0.1.1.9_alpha
ORtortorMatch0.1.1.10_alpha
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tor | tor | 0.0.2 | cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre13 | cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre14 | cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre15 | cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre16 | cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre17 | cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre18 | cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre19 | cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre20 | cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre21 | cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2006-3418
2006-07-07 00:00:00
debiancve
debiancve
CVE-2006-3418
2006-07-07 00:05:00
cvelist
cvelist
CVE-2006-3418
2006-07-07 00:00:00
nvd
nvd
CVE-2006-3418
2006-07-07 00:05:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.007
Percentile
80.7%
Related for CVE-2006-3418