CVE-2005-3398

SUN Solaris - Information Disclosure

Title source: rule

Description

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.

Exploits (1)

metasploit SCANNER

by Jay Turla <@shipcod3>, CG · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/trace.rb

View Code ZIP pw:eip

References (6)

[Patch] http://securitytracker.com/id?1015112

[Patch, Vendor Advisory] http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/15222

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445

[Third Party Advisory] http://secunia.com/advisories/17334

[Third Party Advisory] http://www.vupen.com/english/advisories/2005/2226

Scores

EPSS 0.3954

EPSS Percentile 97.3%

Details

CWE

CWE-200

Status published

Products (3)

sun/solaris 9.0

sun/solaris 10.0

sun/sunos 5.8

Published Nov 01, 2005

Tracked Since Feb 18, 2026