PT-2006-7490 · Tor+1 · Tor+1

Steven J. Murdoch · Published 2006-12-31 · Updated 2008-09-05 · CVE-2006-6893

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Tor (affected versions not specified)

Description: The issue allows remote attackers to discover the IP address of a hidden service by accessing it at a high rate. This causes a change in the server's CPU temperature, which in turn alters the pattern of time values visible through ICMP timestamps, TCP sequence numbers, and TCP timestamps.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-6893

Affected Products

Debian

Tor

References · 10

• 🔥 http://cl.cam.ac.uk/~sjm217/papers/ccs06hotornot.pdf · Exploit
• https://security-tracker.debian.org/tracker/source-package/tor · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-6893 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-6893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6893 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6893 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2006-6893 · Vendor Advisory
• https://packages.debian.org/src:tor · Note
• http://lightbluetouchpaper.org/2006/09/04/hot-or-not-revealing-hidden-services-by-their-clock-skew · Note
• http://events.ccc.de/congress/2006/Fahrplan/events/1513.en.html · Note