Lucene search
HistoryNov 01, 2005 - 12:47 p.m.
CVE-2005-3398
solaris management console
solaris 8
solaris 9
solaris 10
http trace method
remote attackers
sensitive information
nvd
cve-2005-3398
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.008 Low
EPSS
Percentile
81.5%
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:sunos | sun sunos | eq | 5.8 |
| sun:solaris | sun solaris | eq | 10.0 |
| sun:solaris | sun solaris | eq | 9.0 |
Related
openvas
openvas
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02
2009-06-03 00:00:00
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
2009-06-03 00:00:00
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
2009-06-03 00:00:00
nessus
nessus
Solaris 9 (sparc) : 116807-02
2004-07-12 00:00:00
Solaris 9 (x86) : 116808-02
2004-07-12 00:00:00
HTTP Reverse Proxy Detection (Deprecated)
2002-07-02 00:00:00
cve
cve
prion
prion
Design/Logic Flaw
2010-01-25 19:30:00
Cross site scripting
2007-06-04 17:30:00
Design/Logic Flaw
2010-01-25 19:30:00
redhatcve
redhatcve
CVE-2007-3008
2015-10-30 09:28:33
f5
f5
SOL15904 - Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
K15904 : Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
pentestpartners
pentestpartners
Vulnerabilities that aren’t. Cross Site Tracing / XST
2022-01-25 06:08:46
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.008 Low
EPSS
Percentile
81.5%
Related for CVE-2005-3398