PT-2005-4196 · Oracle · Solaris Management Console

Published 2005-11-01 · Updated 2026-05-28 · CVE-2005-3398

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Solaris Management Console (SMC) versions 8 through 10

Description The default configuration of the web server for the Solaris Management Console enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.

Recommendations For Solaris Management Console (SMC) versions 8 through 10, consider disabling the HTTP TRACE method to prevent potential information disclosure.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2005-3398

Affected Products

Solaris Management Console

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/options.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/trace.rb · Exploit
• http://securitytracker.com/id?1015112 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3398 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445 · Note
• http://secunia.com/advisories/17334 · Note
• https://t.me/cveNotify/165090 · Telegram Post
• http://vupen.com/english/advisories/2005/2226 · Note
• http://securityfocus.com/bid/15222 · Note