CVE-2006-3414

Publication date 7 July 2006

Last updated 17 July 2025


Ubuntu priority

Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.

Status

Package Ubuntu Release Status
tor 9.10 karmic Not in release
9.04 jaunty Not in release
8.10 intrepid
Fixed 0.1.1.20-1
8.04 LTS hardy
Fixed 0.1.1.20-1
7.10 gutsy
Fixed 0.1.1.20-1
7.04 feisty
Fixed 0.1.1.20-1
6.10 edgy
Fixed 0.1.1.20-1
6.06 LTS dapper Ignored end of life