CVE-2006-3418
N/A
Published: July 7, 2006 at 12:00 AM UTC
Updated: June 16, 2026 at 10:27 PM UTC
1 product affected across 1 vendorTor
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
0.0.20.0.2_pre130.0.2_pre140.0.2_pre150.0.2_pre160.0.2_pre170.0.2_pre180.0.2_pre190.0.2_pre200.0.2_pre210.0.2_pre220.0.2_pre230.0.2_pre240.0.2_pre250.0.2_pre260.0.2_pre270.0.30.0.40.0.50.0.60.0.6.10.0.6.20.0.70.0.7.10.0.7.20.0.7.30.0.80.0.8.10.0.90.0.9.10.0.9.100.0.9.20.0.9.30.0.9.40.0.9.50.0.9.60.0.9.70.0.9.80.0.9.90.1.0.10.1.0.100.1.0.110.1.0.120.1.0.130.1.0.140.1.0.150.1.0.160.1.0.170.1.0.180.1.0.190.1.0.20.1.0.30.1.0.40.1.0.50.1.0.60.1.0.70.1.0.80.1.0.90.1.1.10_alpha0.1.1.1_alpha0.1.1.2_alpha0.1.1.3_alpha0.1.1.4_alpha0.1.1.5_alpha0.1.1.6_alpha0.1.1.7_alpha0.1.1.8_alpha0.1.1.9_alpha
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
Third Party Advisoryx_refsource_SECUNIAPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20514Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
http://security.gentoo.org/glsa/glsa-200606-04.xmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card