← Database

CVE-2004-2763

MEDIUM CVSS: 5.8 Published: 2009-06-01 Modified: 2026-06-16

Description

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.

Affected Platforms

Sun One Web ServerSun Iplanet Web Server

Weakness Type

CWE-16

References