CVE-2005-3398
medium · 4.3The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
4.3
CVSS
13.1%
EPSS (exploit prob.)
96th
EPSS percentile
2005-11-01
Published
AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sun | solaris | 9.0 |
| sun | solaris | 10.0 |
| sun | sunos | 5.8 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/17334
- http://securitytracker.com/id?1015112
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1
- http://www.securityfocus.com/bid/15222
- http://www.vupen.com/english/advisories/2005/2226
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445
- http://secunia.com/advisories/17334
- http://securitytracker.com/id?1015112
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1
- http://www.securityfocus.com/bid/15222
- http://www.vupen.com/english/advisories/2005/2226
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-3398