Lucene search

K
securityvulnsSECURITYVULNSSECURITYVULNS:VULN:7199
HistoryFeb 08, 2007 - 12:00 a.m.

3proxy user account locking

2007-02-0800:00:00
vulners.com
14

EPSS

0.003

Percentile

68.8%

It's possible to lock user's account if user's password is stored as NT-hash via HTTP proxy. Service restart or configuration reload is required to restore account in working state. In addition, Basic authentication is offered as first authentication protocol, it can lead to shoosing weak (cleartext) authentication protocol even if stronger one (NTLM) supported. Vulnerability is fixed in 0.5.3 version.

EPSS

0.003

Percentile

68.8%

Related for SECURITYVULNS:VULN:7199