tor Vulnerability Advisory Catalog

Total 56 security vulnerabilities recorded for tor software and firmware.

← Back to All Vendors
CVE-2006-3411 UNKNOWN
Component: tor

TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote a...

📅 2006-07-07
CVSS 6.4 Dossier →
CVE-2006-3410 UNKNOWN
Component: tor

Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspe...

📅 2006-07-07
CVSS 5.0 Dossier →
CVE-2006-3409 UNKNOWN
Component: tor

Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow ...

📅 2006-07-07
CVSS 7.5 Dossier →
CVE-2006-3408 UNKNOWN
Component: tor

Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service...

📅 2006-07-07
CVSS 5.0 Dossier →
CVE-2006-3407 UNKNOWN
Component: tor

Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters....

📅 2006-07-07
CVSS 6.4 Dossier →
CVE-2006-0414 UNKNOWN
Component: tor

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hid...

📅 2006-01-25
CVSS 5.0 Dossier →
CVE-2005-2643 UNKNOWN
Component: tor

Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (...

📅 2005-08-23
CVSS 5.0 Dossier →
CVE-2005-2050 UNKNOWN
Component: tor

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's proc...

📅 2005-06-28
CVSS 5.0 Dossier →
Page 3 of 3 (56 Total Records)