Lucene search
HistoryFeb 08, 2007 - 6:28 p.m.
CVE-2006-6982
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
65.4%
3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials.
Affected configurations
Node
3proxy3proxyMatch0.5
OR3proxy3proxyMatch0.5.1
OR3proxy3proxyMatch0.5.2
Related
cvelist
cvelist
CVE-2006-6982
2007-02-08 18:00:00
cve
cve
CVE-2006-6982
2007-02-08 18:28:00
securityvulns
securityvulns
3proxy user account locking
2007-02-08 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
65.4%
Related for NVD:CVE-2006-6982