VULNERABILITY INTELLIGENCE

CVE-2006-3411

CVSS score6.4 MEDIUM
EPSS probability1.31%
CISA KEVNot currently listed
Published2006-07-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys.

Primary references