CVE-2006-3419

CVE-2006-3419 describes a weakness in Tor versions prior to 0.1.1.20, where it utilized OpenSSL's RAND_pseudo_bytes instead of cryptographically strong RAND_bytes, and failed to reseed its entropy sufficiently after initial startup. This flaw made it easier for attackers to conduct brute-force guessing attacks against the pseudo-random number generator. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), it indicates a network-exploitable vulnerability with low attack complexity, requiring no authentication, and potentially leading to partial confidentiality compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.