Vulnerabilities > CVE-2006-3419 - Unspecified vulnerability in TOR

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

tor

NVD

Published: 2006-07-07

Updated: 2024-11-21

Summary

Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks.

Vulnerable Configurations

Part	Description	Count
Application	Tor TOR TOR 0.1.1.1_Alpha TOR TOR 0.0.6.2 TOR TOR 0.1.0.18 TOR TOR 0.0.2_Pre24 TOR TOR 0.0.2_Pre16 TOR TOR 0.0.5 TOR TOR 0.1.0.7 TOR TOR 0.0.9.8 TOR TOR 0.0.9.10 TOR TOR 0.0.9.2 TOR TOR 0.0.7 TOR TOR 0.1.0.10 TOR TOR 0.0.9 TOR TOR 0.1.0.8 TOR TOR 0.0.9.5 TOR TOR 0.1.0.12 TOR TOR 0.0.9.3 TOR TOR 0.0.2_Pre17 TOR TOR 0.0.8 TOR TOR 0.0.9.9 TOR TOR 0.1.1.3_Alpha TOR TOR 0.1.0.5 TOR TOR 0.1.0.2 TOR TOR 0.1.0.1 TOR TOR 0.0.2_Pre19 TOR TOR 0.0.2_Pre23 TOR TOR 0.0.2_Pre14 TOR TOR 0.1.0.13 TOR TOR 0.1.0.19 TOR TOR 0.1.0.3 TOR TOR 0.0.7.1 TOR TOR 0.0.6 TOR TOR 0.1.1.10_Alpha TOR TOR 0.0.2_Pre26 TOR TOR 0.1.0.14 TOR TOR 0.0.3 TOR TOR 0.0.9.4 TOR TOR 0.1.1.4_Alpha TOR TOR 0.0.2_Pre22 TOR TOR 0.0.2_Pre21 TOR TOR 0.1.0.15 TOR TOR 0.0.6.1 TOR TOR 0.0.2 TOR TOR 0.1.0.6 TOR TOR 0.1.1.7_Alpha TOR TOR 0.0.2_Pre13 TOR TOR 0.1.1.6_Alpha TOR TOR 0.1.0.9 TOR TOR 0.0.7.3 TOR TOR 0.0.7.2 TOR TOR 0.1.1.2_Alpha TOR TOR 0.1.0.16 TOR TOR 0.0.9.1 TOR TOR 0.0.2_Pre18 TOR TOR 0.0.2_Pre27 TOR TOR 0.0.9.7 TOR TOR 0.1.0.17 TOR TOR 0.0.8.1 TOR TOR 0.0.4 TOR TOR 0.0.2_Pre25 TOR TOR 0.1.0.4 TOR TOR 0.0.9.6 TOR TOR 0.1.1.8_Alpha TOR TOR 0.1.1.9_Alpha TOR TOR 0.1.1.5_Alpha TOR TOR 0.1.0.11 TOR TOR 0.0.2_Pre15 TOR TOR 0.0.2_Pre20	68

Summary

Vulnerable Configurations

References