CVE-2006-3414: Tor

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.

Affected products

• Tor Tor: version 0.0.2 only; version 0.0.2_pre13 only; version 0.0.2_pre14 only; version 0.0.2_pre15 only; version 0.0.2_pre16 only; version 0.0.2_pre17 only; …

Published 2006-07-07. Last modified 2026-06-16.