QwikSec

Security Database

CVE

CWE

Training

CVE-2006-6982

Published: Feb 8, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://3proxy.ru/0.5.3g/Changelog.txt

x_refsource_CONFIRM

3proxy-ntlm-information-disclosure(38205)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.