Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-3418
HistoryJul 07, 2006 - 12:00 a.m.

CVE-2006-3418

2006-07-0700:00:00
ubuntu.com
ubuntu.com
12

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

80.7%

Tor before 0.1.1.20 does not validate that a server descriptor’s
fingerprint line matches its identity key, which allows remote attackers to
spoof the fingerprint line, which might be trusted by users or other
applications.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchtor< 0.1.1.20-1UNKNOWN
ubuntu7.04noarchtor< 0.1.1.20-1UNKNOWN
ubuntu7.10noarchtor< 0.1.1.20-1UNKNOWN
ubuntu8.04noarchtor< 0.1.1.20-1UNKNOWN
ubuntu8.10noarchtor< 0.1.1.20-1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

80.7%

Related for UB:CVE-2006-3418