CVE:CVE-2006-0414
CNNVD:CNNVD-200601-324
Tor是一个用于匿名访问因特网的软件，用于防范流量过滤和嗅探分析等。
Tor的某些版本存在信息泄漏漏洞。攻击者可以创建恶意的Tor server并试图反复访问隐藏的服务，并在每次访问后追踪哪些用户通过恶意的服务器创建了环路，这样就可以比预期时间更快的找到隐藏服务的位置。如果访问了隐藏服务就可能获得有关Tor用户的敏感信息。
solution:Upgrade tor tor to a higher version than 0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.1.1_alpha,0.1.1.2_alpha,0.1.1.3_alpha,0.1.1.4_alpha,0.1.1.5_alpha,0.1.1.6_alpha,0.1.1.7_alpha,0.1.1.8_alpha,0.1.1.9_alpha,0.1.1.10_alpha,and avoid the version 0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.1.1_alpha,0.1.1.2_alpha,0.1.1.3_alpha,0.1.1.4_alpha,0.1.1.5_alpha,0.1.1.6_alpha,0.1.1.7_alpha,0.1.1.8_alpha,0.1.1.9_alpha,0.1.1.10_alpha