CVE-2006-6982 | BDVDB-2026-22136 Detail

Description#

3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://3proxy.ru/0.5.3g/Changelog.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/38205

Exploit#

No public exploit known

History#

Version 12007-02-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.