{"id":"CVE-2006-6893","aliases":["DEBIAN-CVE-2006-6893","EUVD-2006-6876","GHSA-mhf3-xw62-m62g"],"status":"published","title":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this...","description":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02508,"percentile":0.84873,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-12-31T05:00:00Z","modified":"2026-06-16T22:34:00Z","products":[{"vendor":"tor","product":"tor"}],"references":[{"url":"http://events.ccc.de/congress/2006/Fahrplan/events/1513.en.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.lightbluetouchpaper.org/2006/09/04/hot-or-not-revealing-hidden-services-by-their-clock-skew/","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.cl.cam.ac.uk/~sjm217/papers/ccs06hotornot.pdf","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-6893"},{"url":"http://www.lightbluetouchpaper.org/2006/09/04/hot-or-not-revealing-hidden-services-by-their-clock-skew"},{"url":"https://github.com/advisories/GHSA-mhf3-xw62-m62g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-6893","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2006-6893","description":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.","status":"published","published":"2007-01-08T20:00:00Z","modified":"2024-09-17T04:24:29.119Z","updated_at":"2026-11-02T14:33:50.738595Z"}],"euvd":[{"id":"EUVD-2006-6876","description":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.","status":"published","published":"2007-01-08T20:00:00Z","modified":"2024-09-17T04:24:29Z","updated_at":"2026-11-03T00:28:23.50734Z"}],"ghsa":[{"id":"GHSA-mhf3-xw62-m62g","title":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this...","description":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.","status":"published","published":"2022-05-01T07:42:41Z","modified":"2025-04-09T03:36:40Z","updated_at":"2026-11-02T15:00:53.302842Z"}],"nvd":[{"id":"CVE-2006-6893","description":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.","status":"published","published":"2006-12-31T05:00:00Z","modified":"2026-06-16T22:34:00.133Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:10.726159Z"}],"osv":[{"id":"CVE-2006-6893","description":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.","status":"published","published":"2006-12-31T05:00:00Z","modified":"2026-04-10T03:37:54.819081Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2006-6893","description":"Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.","status":"withdrawn","published":"2006-12-31T05:00:00Z","modified":"2026-02-09T19:56:58.759329Z","updated_at":"2026-11-02T15:45:23.105674Z"}]}}