VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 1, 2005· Updated Apr 16, 2026

CVE-2005-3398

CVE-2005-3398

Description

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.

Affected products

3
  • Sun Corporation/Solaris2 versions
    cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*+ 1 more
    • cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
    • cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
  • Sun Corporation/Sunos
    cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.