CVE-2005-3398: Infoleak
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3398?
CVE-2005-3398 is considered a medium severity vulnerability due to its potential for disclosing sensitive information.
How do I fix CVE-2005-3398?
To fix CVE-2005-3398, disable the HTTP TRACE method in the web server configuration for Solaris Management Console.
What systems are affected by CVE-2005-3398?
CVE-2005-3398 affects the Solaris Management Console on Solaris 8, 9, and 10 installations.
What type of information can be leaked due to CVE-2005-3398?
CVE-2005-3398 can lead to the leakage of sensitive information such as cookies and authentication data from HTTP headers.
Can remote attackers exploit CVE-2005-3398?
Yes, remote attackers can exploit CVE-2005-3398 to gain access to sensitive information if the HTTP TRACE method is enabled.