CVE-2005-3398

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow…

published November 1, 2005

CVSS

—

EPSS

13%

Percentile

96.3

In the wild

Unconfirmed

What it is

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13108 · 96.3th percentile
Published: 2005-11-01T11:00Z

EPSS history

Timeline

01 NOV 11:00Z
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow…
cvelistv5