CVE-2005-3398

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2005-11-01

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Solaris (Sun)
• Sunos (Sun)

References

• http://secunia.com/advisories/17334
• http://securitytracker.com/id?1015112
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1
• http://www.securityfocus.com/bid/15222
• http://www.vupen.com/english/advisories/2005/2226
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445