Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2006-3416
HistoryJul 07, 2006 - 12:05 a.m.

CVE-2006-3416

2006-07-0700:05:00
Debian Security Bug Tracker
security-tracker.debian.org
9
tor
circuit kill
network disruption
self-dos

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

Low

EPSS

0.004

Percentile

72.3%

Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the “Security fixes” section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS. Therefore this issue should not be included in CVE

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

Low

EPSS

0.004

Percentile

72.3%

Related for DEBIANCVE:CVE-2006-3416