CVE-2005-3398
Solaris 8-10 - Unauthenticated Sensitive Information Exposure via HTTP TRACE Method
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3398.
PoCs published by Jay Turla <@shipcod3>, CG, including Metasploit module auxiliary/scanner/http/trace.
AI-analyzed exploit summary This Metasploit module checks if a target host is vulnerable to Cross-Site Tracing (XST) by sending a TRACE request with a JavaScript payload. It verifies if the payload is reflected in the response, indicating potential XST vulnerability.
Description
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
Exploits (1)
This Metasploit module checks if a target host is vulnerable to Cross-Site Tracing (XST) by sending a TRACE request with a JavaScript payload. It verifies if the payload is reflected in the response, indicating potential XST vulnerability.