Security Advisory

CVE-2005-4874

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-03-28 23:00:00

Last updated 2024-08-08 00:01:23

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or (2) arbitrary local passwords on the web server that hosts this object.

← Browse all CVEs View on cve.org ↗