PT-2007-1260 · 3Proxy · 3Proxy

Boris16

·

Publicado

2007-02-08

·

Atualizado

2017-07-29

·

CVE-2006-6981

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions 3proxy versions 0.5 through 0.5.2
Description The issue allows remote attackers to cause a denial of service, specifically a blocked account, when NT-encoded passwords are used. This is related to NTLM authentication and results in a password hash being overwritten.
Recommendations For versions 0.5 through 0.5.2, consider disabling NTLM authentication until a patch is available to prevent the denial of service. Restrict access to accounts using NT-encoded passwords to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-6981

Produtos afetados

3Proxy