What’s Vulnerable › Vulnerabilities

CVE-2006-6982

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-02-08 · updated 2026-06-16

Description

3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials.

Affected products

• 3proxy: 0.5, 0.5.1, 0.5.2

References

• http://3proxy.ru/0.5.3g/Changelog.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38205
• http://3proxy.ru/0.5.3g/Changelog.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38205

Get alerted when CVE-2006-6982 or the next vulnerability affects your stack