CVE-2005-3398
NoneCVSS
—
EPSS
13.1%
Published
Nov 1, 2005
CISA due date
—
The record
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-53586 libgit2 is a portable C implementation of the Git core methods provided as a linkable… CWE-200
- CVE-2026-60589 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… CWE-200
- CVE-2026-73622 GitPython before 3.1.55 fails to disable environment variable expansion in… CWE-200
- CVE-2026-73229 Django REST framework is a powerful and flexible toolkit for building Web APIs. CWE-200
- CVE-2026-71849 Hono is a Web application framework that provides support for any JavaScript runtime. CWE-200
- CVE-2026-69153 PostCSS takes a CSS file and provides an API to analyze and modify its rules by… CWE-200
- CVE-2026-67320 axios in a Node.js deployment using the HTTP adapter can route requests through an… CWE-200
- CVE-2026-67322 GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in… CWE-200