Every CVE Search/ Get API key

CVE-2006-3410

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit...

5.0 MediumFix available

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

Exploit likelihood

1.62%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

Record
CVE-2006-3410
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

Record
CVE-2006-3410
Updated
2026-11-02
EUVDEUVD-2006-3406 No score

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

Record
EUVD-2006-3406
Updated
2026-11-03
GitHub AdvisoriesGHSA-733x-8jgh-6gwm No score

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit...

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

Record
GHSA-733x-8jgh-6gwm
Updated
2026-11-02
OSV No score

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

Record
CVE-2006-3410
Updated
2026-11-02
OSVDEBIAN-CVE-2006-3410 No score

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

Record
DEBIAN-CVE-2006-3410
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tor
Debian:12
before 0.1.1.20-1
0.1.1.20-1
tor
Debian:13
before 0.1.1.20-1
0.1.1.20-1
tor
Debian:14
before 0.1.1.20-1
0.1.1.20-1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3410 is a medium vulnerability (CVSS 5.0) in Tor, published July 7, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in tor 0.1.1.20-1.

References

Show 4 moreShow less
MoveEnter Open