Home > Vulnerability Database > CVE-2006-3411

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-3411

Date: October 3, 2022

TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys.

Severity Score

6.5

Related Resources (7)

Url: http://secunia.com/advisories/20514

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-3411

Url: http://security.gentoo.org/glsa/glsa-200606-04.xml

Url: http://tor.eff.org/cvs/tor/ChangeLog

Url: http://www.osvdb.org/25876

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-3411

Url: https://www.mend.io/vulnerability-database/CVE-2006-3411

Severity Score

6.5

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	6.4
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us