CVE-2005-3398 | BDVDB-2026-13009 Detail
Description#
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/15222
- http://secunia.com/advisories/17334
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445
- http://www.vupen.com/english/advisories/2005/2226
- http://securitytracker.com/id?1015112
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.