CVE-2006-3414
Publication date 7 July 2006
Last updated 17 July 2025
Ubuntu priority
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.