CVE-2004-2763

Published: Jun 1, 2009Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.

Affected (47)

Products: Sun: Iplanet Web Server, One Web Server

Sun

2 products

Iplanet Web Server

One Web Server

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Sun Iplanet Web Server	Version 4.1 sp10
Sun Iplanet Web Server	Version 4.1 sp10
Sun Iplanet Web Server	Version 4.1 sp11
Sun Iplanet Web Server	Version 4.1 sp11
Sun Iplanet Web Server	Version 4.1 sp12
Sun Iplanet Web Server	Version 4.1 sp12
Sun Iplanet Web Server	Version 4.1 sp1
Sun Iplanet Web Server	Version 4.1 sp1
Sun Iplanet Web Server	Version 4.1 sp2
Sun Iplanet Web Server	Version 4.1 sp2
Sun Iplanet Web Server	Version 4.1 sp3
Sun Iplanet Web Server	Version 4.1 sp3
Sun Iplanet Web Server	Version 4.1 sp4
Sun Iplanet Web Server	Version 4.1 sp4
Sun Iplanet Web Server	Version 4.1 sp5
Sun Iplanet Web Server	Version 4.1 sp5
Sun Iplanet Web Server	Version 4.1 sp6
Sun Iplanet Web Server	Version 4.1 sp6
Sun Iplanet Web Server	Version 4.1 sp7
Sun Iplanet Web Server	Version 4.1 sp7
Sun Iplanet Web Server	Version 4.1 sp8
Sun Iplanet Web Server	Version 4.1 sp8
Sun Iplanet Web Server	Version 4.1 sp9
Sun Iplanet Web Server	Version 4.1 sp9
Sun Iplanet Web Server	Version 6.0 sp1
Sun Iplanet Web Server	Version 6.0 sp2
Sun Iplanet Web Server	Version 6.0 sp3
Sun Iplanet Web Server	Version 6.0 sp4
Sun Iplanet Web Server	Version 6.0 sp5
Sun One Web Server	Version 4.1
Sun One Web Server	Version 4.1 sp10
Sun One Web Server	Version 4.1 sp11
Sun One Web Server	Version 4.1 sp12
Sun One Web Server	Version 4.1 sp1
Sun One Web Server	Version 4.1 sp2
Sun One Web Server	Version 4.1 sp3
Sun One Web Server	Version 4.1 sp4
Sun One Web Server	Version 4.1 sp5
Sun One Web Server	Version 4.1 sp6
Sun One Web Server	Version 4.1 sp7
Sun One Web Server	Version 4.1 sp8
Sun One Web Server	Version 4.1 sp9
Sun One Web Server	Version 6.0 sp3
Sun One Web Server	Version 6.0 sp4
Sun One Web Server	Version 6.0 sp5
Sun One Web Server	Version 6.1 sp1
Sun One Web Server	Version 6.1 sp2