PT-2007-1260 · 3Proxy · 3Proxy

Boris16 · Published 2007-02-08 · Updated 2017-07-29 · CVE-2006-6981

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions 3proxy versions 0.5 through 0.5.2

Description The issue allows remote attackers to cause a denial of service, specifically a blocked account, when NT-encoded passwords are used. This is related to NTLM authentication and results in a password hash being overwritten.

Recommendations For versions 0.5 through 0.5.2, consider disabling NTLM authentication until a patch is available to prevent the denial of service. Restrict access to accounts using NT-encoded passwords to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-6981

Affected Products

3Proxy

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-6981 · Security Note
• http://3proxy.ru/0.5.3g/Changelog.txt · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38201 · Note