PT-2009-1145 · Sun · Sunone/Iplanet Web Server

CVE-2004-2763 · Publicado 2009-06-01 · Atualizado 2026-05-28

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun ONE/iPlanet Web Server versions 4.1 SP1 through 4.1 SP12 Sun ONE/iPlanet Web Server versions 6.0 SP1 through 6.0 SP5

Description The default configuration of the web server responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.

Recommendations For Sun ONE/iPlanet Web Server versions 4.1 SP1 through 4.1 SP12, disable the HTTP TRACE request to prevent cross-site tracing attacks. For Sun ONE/iPlanet Web Server versions 6.0 SP1 through 6.0 SP5, disable the HTTP TRACE request to prevent cross-site tracing attacks.

Exploit

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2004-2763

Produtos afetados

Sunone/Iplanet Web Server

Referências · 5

• 🔥 http://cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf · Exploit
• http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.html · Aviso do Fabricante
• https://t.me/cveNotify/165090 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2004-2763 · Nota de Segurança
• http://kb.cert.org/vuls/id/867593 · Nota