CVE-2006-3418 | BDVDB-2026-17964 Detail

Description#

Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/25881
http://secunia.com/advisories/20514
http://security.gentoo.org/glsa/glsa-200606-04.xml
http://tor.eff.org/cvs/tor/ChangeLog

Exploit#

No public exploit known

History#

Version 12006-07-07Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.