CWE
16
Advisory Published
Updated

CVE-2004-2763

First published: Mon Jun 01 2009(Updated: )

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Sun ONE Web Server=4.1
Sun ONE Web Server=6.0-sp3
Sun ONE Web Server=6.1-sp1
Sun Iplanet Web Server=4.1-sp9
Sun Iplanet Web Server=6.0-sp1
Sun ONE Web Server=4.1-sp11
Sun Iplanet Web Server=4.1-sp4
Sun Iplanet Web Server=4.1-sp10
Sun Iplanet Web Server=6.0-sp2
Sun Iplanet Web Server=4.1-sp1
Sun Iplanet Web Server=4.1-sp7
Sun ONE Web Server=6.0-sp5
Sun Iplanet Web Server=4.1-sp1
Sun Iplanet Web Server=6.0-sp4
Sun Iplanet Web Server=4.1-sp3
Sun Iplanet Web Server=4.1-sp8
Sun ONE Web Server=4.1-sp3
Sun Iplanet Web Server=4.1-sp9
Sun ONE Web Server=4.1-sp1
Sun Iplanet Web Server=4.1-sp5
Sun Iplanet Web Server=4.1-sp10
Sun Iplanet Web Server=4.1-sp11
Sun ONE Web Server=4.1-sp6
Sun ONE Web Server=4.1-sp5
Sun ONE Web Server=6.1-sp2
Sun ONE Web Server=4.1-sp2
Sun ONE Web Server=4.1-sp9
Sun Iplanet Web Server=4.1-sp2
Sun Iplanet Web Server=4.1-sp11
Sun Iplanet Web Server=4.1-sp6
Sun ONE Web Server=4.1-sp8
Sun ONE Web Server=4.1-sp7
Sun ONE Web Server=4.1-sp12
Sun Iplanet Web Server=4.1-sp4
Sun Iplanet Web Server=4.1-sp6
Sun Iplanet Web Server=6.0-sp3
Sun Iplanet Web Server=6.0-sp5
Sun Iplanet Web Server=4.1-sp8
Sun ONE Web Server=6.0-sp4
Sun Iplanet Web Server=4.1-sp12
Sun Iplanet Web Server=4.1-sp7
Sun ONE Web Server=4.1-sp4
Sun Iplanet Web Server=4.1-sp5
Sun Iplanet Web Server=4.1-sp2
Sun Iplanet Web Server=4.1-sp12
Sun ONE Web Server=4.1-sp10
Sun Iplanet Web Server=4.1-sp3

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203