CVE-2006-6981: 3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of...

Security readout for executives and security teams

This older 3proxy issue can let a remote attacker cause account lockout when NT-encoded passwords are used. The public description says NTLM-related handling may overwrite a password hash, resulting in denial of service. No CVSS score, CWE, or confirmed active exploitation is provided. Exposure is most likely in legacy 3proxy 0.5, 0.5.1, or 0.5.2 deployments using NT-encoded passwords or NTLM authentication. The provided data does not identify other affected products, platforms, or configurations. Treat this as a legacy exposure review item, not an emergency, unless affected 3proxy versions are still internet-accessible or business-critical accounts can be blocked through NTLM authentication. Mitigation focus: Inventory 3proxy instances and identify versions 0.5 through 0.5.2.; Check whether NT-encoded passwords or NTLM authentication are enabled.; Review 3proxy vendor changelog and guidance for the corrected release path..

Prepared

Jun 29, 2026, 07:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.