Vulnerabilities > CVE-2006-6982 - Remote Security vulnerability in 3Proxy 0.5/0.5.1/0.5.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials. The link is to the vendor's changelog. The vendor's download site is: http://3proxy.ru/download/ For the latest build.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |