| Package | Affected versions | Patched versions |
|---|---|---|
| 3proxy | = 0.5= 0.5.1= 0.5.2 |
3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free