CVE:CVE-2006-3419
CNNVD:CNNVD-200607-049
Tor before 0.1.1.20 使用 OpenSSL伪随机字节(RAND_pseudo_bytes)而非强密码RAND_字节，并在以160位组块起动时播种entropy值而不重复播种，可以使攻击者更易于进行强力的猜测攻击。
solution:Upgrade tor tor to a higher version than 0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.1,0.1.0.2,0.1.0.3,0.1.0.4,0.1.0.5,0.1.0.6,0.1.0.7,0.1.0.8,0.1.0.9,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.0.18,0.1.0.19,0.1.1.1_alpha,0.1.1.2_alpha,0.1.1.3_alpha,0.1.1.4_alpha,0.1.1.5_alpha,0.1.1.6_alpha,0.1.1.7_alpha,0.1.1.8_alpha,0.1.1.9_alpha,0.1.1.10_alpha,and avoid the version 0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.1,0.1.0.2,0.1.0.3,0.1.0.4,0.1.0.5,0.1.0.6,0.1.0.7,0.1.0.8,0.1.0.9,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.0.18,0.1.0.19,0.1.1.1_alpha,0.1.1.2_alpha,0.1.1.3_alpha,0.1.1.4_alpha,0.1.1.5_alpha,0.1.1.6_alpha,0.1.1.7_alpha,0.1.1.8_alpha,0.1.1.9_alpha,0.1.1.10_alpha