CVE-2006-3412: Tor

Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days.

Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers.

Affected products

• Tor Tor: version 0.0.2 only; version 0.0.2_pre13 only; version 0.0.2_pre14 only; version 0.0.2_pre15 only; version 0.0.2_pre16 only; version 0.0.2_pre17 only; …

Published 2006-07-07. Last modified 2026-06-16.