Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2006-3411
HistoryJul 07, 2006 - 12:05 a.m.

CVE-2006-3411

2006-07-0700:05:00
Debian Security Bug Tracker
security-tracker.debian.org
14
tls
brute force
encryption
unix

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.007

Percentile

79.7%

TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys.

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.007

Percentile

79.7%

Related for DEBIANCVE:CVE-2006-3411