CVE Vulnerabilities

CVE-2006-6982

Published: Feb 08, 2007 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials.

Affected Software

Name Vendor Start Version End Version
3proxy 3proxy 0.5.1 0.5.1
3proxy 3proxy 0.5 0.5
3proxy 3proxy 0.5.2 0.5.2

References