// For flags

CVE-2006-6893

 

Severity Score

5.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through (1) ICMP timestamps, (2) TCP sequence numbers, and (3) TCP timestamps, a different vulnerability than CVE-2006-0414. NOTE: it could be argued that this is a laws-of-physics vulnerability that is a fundamental design limitation of certain hardware implementations, so perhaps this issue should not be included in CVE.

Tor permite a atacantes remotos descubrir la dirección IP de un servicio oculto accediendo a este servicio a un alto ritmo de repetición, y por tanto cambiando la temperatura de la CPU y consecuentemente cambiando el patrón de valores de tiempo visibles a través de (1) marcas de tiempo ICMP, (2) números de secuencia TCP, y (3) marcas de tiempo TCP, una vulnerabilidad distinta de CVE-2006-0414. NOTA: podría argumentarse que esto es una vulnerabilidad de las leyes de la física que es una limitación fundamental de diseño de determinadas implementaciones de hardware, por tanto quizás este problema no debería ser incluido en CVE.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-12-31 CVE Published
  • 2007-01-08 CVE Reserved
  • 2024-09-17 CVE Updated
  • 2024-09-17 EPSS Updated
  • 2024-09-17 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Tor
Search vendor "Tor"
Tor
Search vendor "Tor" for product "Tor"
0.1.1.26
Search vendor "Tor" for product "Tor" and version "0.1.1.26"
-
Affected