GCVE - cpe:2.3:a:3proxy:3proxy:0.5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:3proxy:3proxy:0.5.2:*:*:*:*:*:*:*

part: a version: 0.5.2 update: *

Vendor	3Proxy (`30f95271-500f-5200-a211-a5b6529a3fcf`)
Product	3Proxy (`804323b6-5be4-5760-83d8-7f26a84166cf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/3proxy/3proxy`	purl2cpe	2026-06-01 10:11:34.768081
`pkg:github/3proxy/3proxy`	purl2cpe	2026-06-01 10:11:34.768083
`pkg:github/z3apa3a/3proxy`	purl2cpe	2026-06-01 10:11:34.768084

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5622`	vulnerable	2026-06-08 04:50:06.536272	Details available Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP proxy. Published: 2007-10-29T21:00:00.000Z Updated: 2024-08-07T15:39:13.579Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/26180 http://osvdb.org/41870 http://security.gentoo.org/glsa/glsa-200711-13.xml http://www.securityfocus.com/archive/1/482697/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066985.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6982`	vulnerable	2026-06-08 04:49:30.111586	Details available 3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials. Published: 2007-02-08T18:00:00.000Z Updated: 2024-08-07T20:50:05.710Z Open on db.gcve.eu Reference links http://3proxy.ru/0.5.3g/Changelog.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/38205	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6981`	vulnerable	2026-06-08 04:49:30.111142	Details available 3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of service (blocked account) via unspecified vectors related to NTLM authentication, which causes a password hash to be overwritten. Published: 2007-02-08T18:00:00.000Z Updated: 2024-08-07T20:50:04.616Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/38201 http://3proxy.ru/0.5.3g/Changelog.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.