Lucene search
HistoryFeb 08, 2007 - 6:28 p.m.
CVE-2006-6981
3proxy
denial of service
ntlm authentication
cve-2006-6981
6.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
66.2%
3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of service (blocked account) via unspecified vectors related to NTLM authentication, which causes a password hash to be overwritten.
Affected configurations
Node
3proxy3proxyMatch0.5
OR3proxy3proxyMatch0.5.1
OR3proxy3proxyMatch0.5.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| 3proxy:3proxy | 3proxy | eq | 0.5 |
| 3proxy:3proxy | 3proxy | eq | 0.5.1 |
| 3proxy:3proxy | 3proxy | eq | 0.5.2 |
Related
cvelist
cvelist
CVE-2006-6981
2007-02-08 18:00:00
nvd
nvd
CVE-2006-6981
2007-02-08 18:28:00
securityvulns
securityvulns
3proxy user account locking
2007-02-08 00:00:00
6.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
66.2%
Related for CVE-2006-6981