Home > Vulnerability Database > CVE-2006-3412

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-3412

Date: October 3, 2022

Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers.

Severity Score

7.5

Related Resources (7)

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-3412

Url: http://secunia.com/advisories/20514

Url: http://security.gentoo.org/glsa/glsa-200606-04.xml

Url: http://tor.eff.org/cvs/tor/ChangeLog

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-3412

Url: http://www.osvdb.org/25874

Url: https://www.mend.io/vulnerability-database/CVE-2006-3412

Severity Score

7.5

CVSS v3

Base Score:	7.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL

CVSS v2

Base Score:	5.6
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW
Additional information:

Do you need more information?

Contact Us