Security Advisory

CVE-2004-2763

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-06-01 22:00:00

Last updated 2024-09-17 00:11:42

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.

← Browse all CVEs View on cve.org ↗