CVE-2005-3398: Sun Solaris

Medium severity, CVSS 4.3. EPSS: 13.1% chance of exploitation in the next 30 days.

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.

Affected products

• Sun Solaris: version 9.0 only; version 10.0 only
• Sun Sunos: version 5.8 only

Published 2005-11-01. Last modified 2026-06-16.