Sun Solaris Management Console HTTP TRACE Information Disclosure Vulnerability
BID:15222
Info
Sun Solaris Management Console HTTP TRACE Information Disclosure Vulnerability
| Bugtraq ID: | 15222 |
| Class: | Access Validation Error |
| CVE: |
CVE-2005-3398 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2005 12:00AM |
| Updated: | Jun 13 2007 08:09PM |
| Credit: | This issue was reported by Sun. |
| Vulnerable: |
Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10.0_x86 Sun Solaris 10 |
| Not Vulnerable: | |
Discussion
Sun Solaris Management Console HTTP TRACE Information Disclosure Vulnerability
Sun Solaris Management Console is prone to an information-disclosure vulnerability.
The issue presents itself because the server responds to the HTTP TRACE request by default.
With HTTP TRACE functionality enabled by default, an attacker can compromise user accounts by gaining access to sensitive header information. The attacker may exploit this issue along with other attacks, such as cross-site scripting, to steal cookie-based authentication credentials.
Sun Solaris Management Console is prone to an information-disclosure vulnerability.
The issue presents itself because the server responds to the HTTP TRACE request by default.
With HTTP TRACE functionality enabled by default, an attacker can compromise user accounts by gaining access to sensitive header information. The attacker may exploit this issue along with other attacks, such as cross-site scripting, to steal cookie-based authentication credentials.
Exploit / POC
Sun Solaris Management Console HTTP TRACE Information Disclosure Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Sun Solaris Management Console HTTP TRACE Information Disclosure Vulnerability
Solution:
Sun has released advisory 102016 including patches for Solaris 9 to address this issue. Please see the referenced advisory for more information.
Solution:
Sun has released advisory 102016 including patches for Solaris 9 to address this issue. Please see the referenced advisory for more information.
References
Sun Solaris Management Console HTTP TRACE Information Disclosure Vulnerability
References:
References:
- Sun Alert ID: 102016 (Sun)