fkie_cve-2006-3417
Vulnerability from fkie_nvd
Published
2006-07-07 00:05
Modified
2025-04-03 01:03
Severity ?
Summary
Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard" (is_guard) systems by directory authorities.
References
cve@mitre.orghttp://secunia.com/advisories/20514Patch, Vendor Advisory
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-200606-04.xml
cve@mitre.orghttp://tor.eff.org/cvs/tor/ChangeLog
cve@mitre.orghttp://www.osvdb.org/25879
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20514Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-200606-04.xml
af854a3a-2127-422b-91ae-364da2661108http://tor.eff.org/cvs/tor/ChangeLog
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/25879
Impacted products
Vendor Product Version
tor tor 0.0.2
tor tor 0.0.2_pre13
tor tor 0.0.2_pre14
tor tor 0.0.2_pre15
tor tor 0.0.2_pre16
tor tor 0.0.2_pre17
tor tor 0.0.2_pre18
tor tor 0.0.2_pre19
tor tor 0.0.2_pre20
tor tor 0.0.2_pre21
tor tor 0.0.2_pre22
tor tor 0.0.2_pre23
tor tor 0.0.2_pre24
tor tor 0.0.2_pre25
tor tor 0.0.2_pre26
tor tor 0.0.2_pre27
tor tor 0.0.3
tor tor 0.0.4
tor tor 0.0.5
tor tor 0.0.6
tor tor 0.0.6.1
tor tor 0.0.6.2
tor tor 0.0.7
tor tor 0.0.7.1
tor tor 0.0.7.2
tor tor 0.0.7.3
tor tor 0.0.8
tor tor 0.0.8.1
tor tor 0.0.9
tor tor 0.0.9.1
tor tor 0.0.9.2
tor tor 0.0.9.3
tor tor 0.0.9.4
tor tor 0.0.9.5
tor tor 0.0.9.6
tor tor 0.0.9.7
tor tor 0.0.9.8
tor tor 0.0.9.9
tor tor 0.0.9.10
tor tor 0.1.0.1
tor tor 0.1.0.2
tor tor 0.1.0.3
tor tor 0.1.0.4
tor tor 0.1.0.5
tor tor 0.1.0.6
tor tor 0.1.0.7
tor tor 0.1.0.8
tor tor 0.1.0.9
tor tor 0.1.0.10
tor tor 0.1.0.11
tor tor 0.1.0.12
tor tor 0.1.0.13
tor tor 0.1.0.14
tor tor 0.1.0.15
tor tor 0.1.0.16
tor tor 0.1.0.17
tor tor 0.1.0.18
tor tor 0.1.0.19
tor tor 0.1.1.1_alpha
tor tor 0.1.1.2_alpha
tor tor 0.1.1.3_alpha
tor tor 0.1.1.4_alpha
tor tor 0.1.1.5_alpha
tor tor 0.1.1.6_alpha
tor tor 0.1.1.7_alpha
tor tor 0.1.1.8_alpha
tor tor 0.1.1.9_alpha
tor tor 0.1.1.10_alpha


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
              "matchCriteriaId": "4490AC9B-E8D8-4C97-866B-AB76AB2536F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A2A2B60-8D31-4B59-8407-9CE62709906A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDE02B1D-AA25-4364-8E54-583A0304FA69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE3AB095-3F57-4922-BC12-0842FA158555",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
              "matchCriteriaId": "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
              "matchCriteriaId": "811FD436-8BD2-463A-8072-A915FFCA33C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
              "matchCriteriaId": "83F107CD-7334-4D9D-AEFF-FA5F8DE72576",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
              "matchCriteriaId": "07EB2211-D97D-47EF-94D1-01E7A3879BC3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
              "matchCriteriaId": "28DC8889-4E65-46D0-AA68-6390757862D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E4C7373-82F1-49E6-90D6-7A02AC52F255",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F3D847A-D8F1-40CE-AE33-A397654C55B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7301BA35-2522-4144-83C2-6A3A6D329A8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "37993416-D81F-4F6B-AB2C-16F351BE68D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "295C826F-CBEB-4BA2-A760-22D58D231BBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D230B213-4A35-488F-A4B5-87F77BD65E5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFF88062-8726-4C1D-8F93-ABA0B1654656",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A710565-6960-4D46-A1EB-86FE0927A66D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "81F6C954-7C0A-41E5-9719-26082E40C5E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "43784D06-2D2A-46D1-ADE2-B947B3F10F33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "196BF37C-CD62-4D4C-A716-827B0E6A5065",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "20076B65-48E6-4DA2-BDA1-AC4F904B449D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "48A2CCAD-397B-4037-B99B-F0A622FAF8D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "50E74056-DD32-49E6-808A-5A9B755F1DC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E2103A8-0F3F-4226-A5D8-4BF239FD6636",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0490AB18-A839-400D-88E2-D918B1EEFA00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DBED980F-A8B9-4C44-957C-FD18867B1799",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E033E0C-C7F6-4910-A795-28BA60E9431A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AAAACA5-F431-4D83-B04D-EC9A81C96184",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1D5B46C-E7D3-495F-861C-12324F09EC9F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "639E3063-34CC-4AE2-B055-92D36ECAADF2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5305AF8-E26C-44A1-B546-AAC5D1C2D053",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "48DCAB29-4EF2-4A50-A941-DA5D89E27D51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "33928D26-39DF-4E15-9979-F9484913C219",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "48B8A291-E1F7-444F-8C5B-C3C38541B3D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "24581D9F-02AF-42E6-A3D7-9CAD43E26477",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B978E3E-69D7-46BD-BD88-1409A546FF66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7FED829-128A-4F87-9838-AD0C9C11E458",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A39B543-5978-46FC-AF85-D635D87E3B92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "803498D9-C750-4D16-8ADF-2F98E71888A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "C04309D4-FEA8-47EA-BB9A-8CBD341B475F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "8607F3C9-F185-4B87-8A1B-B9495A4F244D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "667201BB-5FDA-4E51-B865-0AF8507DBCDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C7D396C-36CA-4579-BCA0-672440CB5CCD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "811CE708-CEE6-4B0F-98E5-E138C06EA382",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "6860F802-FEC2-449A-A5FC-AFACCA8633CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4D9E677-01D2-4800-82AA-F5585475D500",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C589D4F-60B3-450B-860A-9975BB47BBE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA331167-6A2F-402F-A28F-9EE7B6F20207",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4740B10-EFB8-4F79-88C1-9B6F5897A71C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "31CA7556-D132-4E81-8E13-C7E025AF20AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "D224FA8D-4C5A-48BE-92F2-1EC57782046D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy \"entry guard\" (is_guard) systems by directory authorities."
    },
    {
      "lang": "es",
      "value": "El Cliente Tor, anterior a 0.1.1.20, prefiere puntos de entrada basados en las banderas is_fast o is_stable, que permitir\u00eda a atacantes remotos ser preferidos sobre los nodos que est\u00e1n identificados como sistemas m\u00e1s confiables \"entry guard\" (is_guard) por las autoridades de directorio."
    }
  ],
  "id": "CVE-2006-3417",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 6.4,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-07-07T00:05:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20514"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200606-04.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://tor.eff.org/cvs/tor/ChangeLog"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/25879"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20514"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200606-04.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://tor.eff.org/cvs/tor/ChangeLog"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/25879"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.