CVE-2006-3407: Medium severity Tor (The Onion Router) vulnerability
Published Jul 7, 2006
·Updated
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
Affected Software
68 affected components
Tor (The Onion Router)=0.1.1.1_alpha
Tor (The Onion Router)=0.0.6.2
Tor (The Onion Router)=0.1.0.18
Tor (The Onion Router)=0.0.2_pre24
Tor (The Onion Router)=0.0.2_pre16
Tor (The Onion Router)=0.0.5
Tor (The Onion Router)=0.1.0.7
Tor (The Onion Router)=0.0.9.8
Tor (The Onion Router)=0.0.9.10
Tor (The Onion Router)=0.0.9.2
Tor (The Onion Router)=0.0.7
Tor (The Onion Router)=0.1.0.10
Tor (The Onion Router)=0.0.9
Tor (The Onion Router)=0.1.0.8
Tor (The Onion Router)=0.0.9.5
Tor (The Onion Router)=0.1.0.12
Tor (The Onion Router)=0.0.9.3
Tor (The Onion Router)=0.0.2_pre17
Tor (The Onion Router)=0.0.8
Tor (The Onion Router)=0.0.9.9
Tor (The Onion Router)=0.1.1.3_alpha
Tor (The Onion Router)=0.1.0.5
Tor (The Onion Router)=0.1.0.2
Tor (The Onion Router)=0.1.0.1
Tor (The Onion Router)=0.0.2_pre19
Tor (The Onion Router)=0.0.2_pre23
Tor (The Onion Router)=0.0.2_pre14
Tor (The Onion Router)=0.1.0.13
Tor (The Onion Router)=0.1.0.19
Tor (The Onion Router)=0.1.0.3
Tor (The Onion Router)=0.0.7.1
Tor (The Onion Router)=0.0.6
Tor (The Onion Router)=0.1.1.10_alpha
Tor (The Onion Router)=0.0.2_pre26
Tor (The Onion Router)=0.1.0.14
Tor (The Onion Router)=0.0.3
Tor (The Onion Router)=0.0.9.4
Tor (The Onion Router)=0.1.1.4_alpha
Tor (The Onion Router)=0.0.2_pre22
Tor (The Onion Router)=0.0.2_pre21
Tor (The Onion Router)=0.1.0.15
Tor (The Onion Router)=0.0.6.1
Tor (The Onion Router)=0.0.2
Tor (The Onion Router)=0.1.0.6
Tor (The Onion Router)=0.1.1.7_alpha
Tor (The Onion Router)=0.0.2_pre13
Tor (The Onion Router)=0.1.1.6_alpha
Tor (The Onion Router)=0.1.0.9
Tor (The Onion Router)=0.0.7.3
Tor (The Onion Router)=0.0.7.2
Tor (The Onion Router)=0.1.1.2_alpha
Tor (The Onion Router)=0.1.0.16
Tor (The Onion Router)=0.0.9.1
Tor (The Onion Router)=0.0.2_pre18
Tor (The Onion Router)=0.0.2_pre27
Tor (The Onion Router)=0.0.9.7
Tor (The Onion Router)=0.1.0.17
Tor (The Onion Router)=0.0.8.1
Tor (The Onion Router)=0.0.4
Tor (The Onion Router)=0.0.2_pre25
Tor (The Onion Router)=0.1.0.4
Tor (The Onion Router)=0.0.9.6
Tor (The Onion Router)=0.1.1.8_alpha
Tor (The Onion Router)=0.1.1.9_alpha
Tor (The Onion Router)=0.1.1.5_alpha
Tor (The Onion Router)=0.1.0.11
Tor (The Onion Router)=0.0.2_pre15
Tor (The Onion Router)=0.0.2_pre20
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jul 7, 2006
CVE Published
12:05 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3407?
CVE-2006-3407 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2006-3407?
To resolve CVE-2006-3407, upgrade to a version of Tor that is 0.1.1.20 or later.
3
What types of attacks are possible with CVE-2006-3407?
CVE-2006-3407 allows attackers to spoof log entries or potentially execute shell code.
4
Which versions of Tor are affected by CVE-2006-3407?
Affected versions of Tor include all releases before 0.1.1.20.
5
What are the consequences of exploiting CVE-2006-3407?
Exploiting CVE-2006-3407 may lead to unauthorized execution of commands and manipulation of application logs.