CVE-2006-3419

CVE-2006-3419 affects Tor prior to 0.1.1.20. The issue stems from using OpenSSL RAND_pseudo_bytes instead of a cryptographically strong RAND_bytes, and seeding entropy at startup with 160-bit chunks without reseeding. This design makes brute-force guessing attacks more feasible for an attacker. M...