NetSight
medium6.4

CVE-2006-3417

Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are ide…

Impact

Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard" (is_guard) systems by directory authorities.

Affected products

VendorProductAffected versions
TorTor
Versions 0.0.2, 0.0.2_pre13, 0.0.2_pre14, 0.0.2_pre15, 0.0.2_pre16, 0.0.2_pre17

References