Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2006-3415
HistoryJul 07, 2006 - 12:05 a.m.

CVE-2006-3415

2006-07-0700:05:00
Debian Security Bug Tracker
security-tracker.debian.org
11
tor
version 0.1.1.20
or destination
validation
vulnerability
mitm attack
unix

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.002

Percentile

64.8%

Tor before 0.1.1.20 uses improper logic to validate the “OR” destination, which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors.

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.002

Percentile

64.8%

Related for DEBIANCVE:CVE-2006-3415