Vulnerability in Tor

CVE-2006-0414

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server.

EPSS: 0.030 (85.8th percentile) — read the EPSS interpretation.

Affected products

  • Tor — versions 0.0.2, 0.0.2_pre13, 0.0.2_pre14
  • N/a — versions n/a

References