CVE-2006-4508
Status: ModifiedMedium (4)—
Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service (flood) via unspecified vectors.
CVSS
- Version: 2.0
- Vector: AV:N/AC:H/Au:N/C:P/I:N/A:P
- Base score: 4
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.27%
- Percentile among all scored CVEs: 82
- Score date: 10/8/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- NVD-CWE-Other
References
- http://archives.seul.org/or/announce/Aug-2006/msg00001.html
- http://secunia.com/advisories/21708
- http://secunia.com/advisories/21725
- http://www.scatterchat.com/advisories/2006-02_tech.html
- http://www.securityfocus.com/bid/19785
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28686
- http://archives.seul.org/or/announce/Aug-2006/msg00001.html
- http://secunia.com/advisories/21708
- http://secunia.com/advisories/21725
- http://www.scatterchat.com/advisories/2006-02_tech.html
- http://www.securityfocus.com/bid/19785
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28686
Raw JSON (NVD)
Show
{
"id": "CVE-2006-4508",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-08-31T23:04:00.000",
"references": [
{
"url": "http://archives.seul.org/or/announce/Aug-2006/msg00001.html",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/21708",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/21725",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.scatterchat.com/advisories/2006-02_tech.html",
"tags": [
"Patch",
"Vendor Advisory",
"URL Repurposed"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/19785",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28686",
"source": "cve@mitre.org"
},
{
"url": "http://archives.seul.org/or/announce/Aug-2006/msg00001.html",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/21708",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/21725",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.scatterchat.com/advisories/2006-02_tech.html",
"tags": [
"Patch",
"Vendor Advisory",
"URL Repurposed"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/19785",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28686",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service (flood) via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en (1) Tor 0.1.0.x anteriores a 0.1.0.18 y 0.1.1.x anteriores a 0.1.1.23, y (2) ScatterChat anterior a 1.0.2, permite a atacantes remotos operando un \"nodo de entrada\" en la red Tor encaminar tráfico Tor de su elección a través de clientes o causar una denegación de acceso (inundación) mediante vectores no especificados.\r\n\r\n"
}
],
"lastModified": "2026-06-16T22:29:14.380",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:scatterchat:scatterchat:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A31047A-47A2-4D8D-B5C3-ABBB213FB0EE",
"versionEndIncluding": "1.0.1"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B978E3E-69D7-46BD-BD88-1409A546FF66"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7FED829-128A-4F87-9838-AD0C9C11E458"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A39B543-5978-46FC-AF85-D635D87E3B92"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "803498D9-C750-4D16-8ADF-2F98E71888A4"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F0F837E-12E5-4332-9823-8B1F764042E2"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BF80379-BD68-4E3B-A7CC-57B51619A0B0"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57DAA48C-4B3B-4665-87AB-38ACFD6C757C"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37CF2822-88B6-41F2-B10A-A8B09B27245D"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B300C56E-7DF5-4B24-84D1-A4732515325E"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13846571-C84A-43D6-9970-444E6B4DB0C9"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4D881C4-0302-44E9-A3C5-A23EFD681B5E"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8219F1A-D6F5-4D6E-B10D-4C455073520C"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB701014-7980-4BBE-8BD9-3FD2A0AF6941"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D68C31D4-9478-4EB6-B160-E9970ADA785D"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "872F7B10-30EA-4945-99BC-9EC1C09D6D6B"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BBC3EFD-7F03-4DC1-988C-22007216F9F2"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F7898C5-9450-41FD-B45D-7504D97B4CA9"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3A247E8-F22B-4639-96D2-9BC01C904D56"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1233504-041A-454E-9F2E-6E2A4207879D"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "342D2B8A-A832-4CAB-9389-93764B0DE241"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D44F099-7BC3-45C4-9DB3-03A7E40BC548"
},
{
"criteria": "cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A79A0CD-7B81-417E-8DE3-0D61006003FF"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org",
"evaluatorSolution": "This vulenrability is addressed in the following product release:\r\nTor, Tor, 0.1.1.23, and later\r\nScatterchat, Scatterchat, 1.0.2"
}