Lucene search
MitreCVE-2006-3419HistoryJul 07, 2006 - 12:05 a.m.
CVE-2006-3419
2006-07-0700:05:00
mitre
web.nvd.nist.gov
26
cve-2006-3419
tor
openssl
rand_bytes
entropy
brute force
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.004
Percentile
73.4%
Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks.
Affected configurations
Node
tortorMatch0.0.2
ORtortorMatch0.0.2_pre13
ORtortorMatch0.0.2_pre14
ORtortorMatch0.0.2_pre15
ORtortorMatch0.0.2_pre16
ORtortorMatch0.0.2_pre17
ORtortorMatch0.0.2_pre18
ORtortorMatch0.0.2_pre19
ORtortorMatch0.0.2_pre20
ORtortorMatch0.0.2_pre21
ORtortorMatch0.0.2_pre22
ORtortorMatch0.0.2_pre23
ORtortorMatch0.0.2_pre24
ORtortorMatch0.0.2_pre25
ORtortorMatch0.0.2_pre26
ORtortorMatch0.0.2_pre27
ORtortorMatch0.0.3
ORtortorMatch0.0.4
ORtortorMatch0.0.5
ORtortorMatch0.0.6
ORtortorMatch0.0.6.1
ORtortorMatch0.0.6.2
ORtortorMatch0.0.7
ORtortorMatch0.0.7.1
ORtortorMatch0.0.7.2
ORtortorMatch0.0.7.3
ORtortorMatch0.0.8
ORtortorMatch0.0.8.1
ORtortorMatch0.0.9
ORtortorMatch0.0.9.1
ORtortorMatch0.0.9.2
ORtortorMatch0.0.9.3
ORtortorMatch0.0.9.4
ORtortorMatch0.0.9.5
ORtortorMatch0.0.9.6
ORtortorMatch0.0.9.7
ORtortorMatch0.0.9.8
ORtortorMatch0.0.9.9
ORtortorMatch0.0.9.10
ORtortorMatch0.1.0.1
ORtortorMatch0.1.0.2
ORtortorMatch0.1.0.3
ORtortorMatch0.1.0.4
ORtortorMatch0.1.0.5
ORtortorMatch0.1.0.6
ORtortorMatch0.1.0.7
ORtortorMatch0.1.0.8
ORtortorMatch0.1.0.9
ORtortorMatch0.1.0.10
ORtortorMatch0.1.0.11
ORtortorMatch0.1.0.12
ORtortorMatch0.1.0.13
ORtortorMatch0.1.0.14
ORtortorMatch0.1.0.15
ORtortorMatch0.1.0.16
ORtortorMatch0.1.0.17
ORtortorMatch0.1.0.18
ORtortorMatch0.1.0.19
ORtortorMatch0.1.1.1_alpha
ORtortorMatch0.1.1.2_alpha
ORtortorMatch0.1.1.3_alpha
ORtortorMatch0.1.1.4_alpha
ORtortorMatch0.1.1.5_alpha
ORtortorMatch0.1.1.6_alpha
ORtortorMatch0.1.1.7_alpha
ORtortorMatch0.1.1.8_alpha
ORtortorMatch0.1.1.9_alpha
ORtortorMatch0.1.1.10_alpha
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tor | tor | 0.0.2 | cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre13 | cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre14 | cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre15 | cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre16 | cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre17 | cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre18 | cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre19 | cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre20 | cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:* |
| tor | tor | 0.0.2_pre21 | cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-3419
2006-07-07 00:00:00
nvd
nvd
CVE-2006-3419
2006-07-07 00:05:00
debiancve
debiancve
CVE-2006-3419
2006-07-07 00:05:00
ubuntucve
ubuntucve
CVE-2006-3419
2006-07-07 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.004
Percentile
73.4%
Related for CVE-2006-3419