Home > Vulnerability Database > CVE-2006-3412

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-3412

Date: October 3, 2022

Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers.

Severity Score

6.5

Related Resources (7)

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-3412

Url: http://secunia.com/advisories/20514

Url: http://security.gentoo.org/glsa/glsa-200606-04.xml

Url: http://tor.eff.org/cvs/tor/ChangeLog

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-3412

Url: http://www.osvdb.org/25874

Url: https://www.mend.io/vulnerability-database/CVE-2006-3412

Severity Score

6.5

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	6.4
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us