Lucene search

K
cvelistMitreCVELIST:CVE-2006-6893
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2006-6893

2022-10-0316:21:23
mitre
www.cve.org
tor
vulnerability
hidden service

6.2 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.3%

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server’s CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.

6.2 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.3%