CVE-2005-3398
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8...
CVE-2005-3398 is a medium vulnerability (CVSS 4.3) in Sun Solaris, published November 1, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.1%, the 96th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 13.1%EPSS, 96th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | HTTP Options Detection | |
| Metasploit | HTTP Cross-Site Tracing Detection |
What each source reports
NVD Score used
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
- Record
CVE-2005-3398- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
- Record
CVE-2005-3398- Updated
- 2026-11-02
EUVDEUVD-2005-3397No score
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
- Record
EUVD-2005-3397- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wgh7-rqcp-g392No score
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8...
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
- Record
GHSA-wgh7-rqcp-g392- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/15222
secunia.com/advisories/17334
sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445
vupen.com/english/advisories/2005/2226
securitytracker.com/id?1015112
nvd.nist.gov/vuln/detail/CVE-2005-3398
github.com/advisories/GHSA-wgh7-rqcp-g392