CVE-2006-6981: Medium severity 3proxy 3proxy vulnerability
3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of service (blocked account) via unspecified vectors related to NTLM authentication, which causes a password hash to be overwritten.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6981?
The severity of CVE-2006-6981 is rated as medium with a score of 5.
What vulnerability is described in CVE-2006-6981?
CVE-2006-6981 describes a vulnerability in 3proxy versions 0.5 to 0.5.2 that allows remote attackers to cause a denial of service by overwriting a password hash during NTLM authentication.
How do I fix CVE-2006-6981?
To fix CVE-2006-6981, upgrade to 3proxy version 0.5.3 or later.
What impact does CVE-2006-6981 have on affected systems?
CVE-2006-6981 can lead to a denial of service by blocking user accounts through exploited NTLM authentication mechanisms.
Is CVE-2006-6981 exploitable remotely?
Yes, CVE-2006-6981 is exploitable remotely, as it involves NTLM authentication over the network.