Sun ONE/iPlanet Web Server HTTP TRACE Credential Theft Vulnerability

Bugtraq ID:	9561
Class:	Access Validation Error
CVE:	CVE-2004-2763
Remote:	Yes
Local:	No
Published:	Feb 02 2004 12:00AM
Updated:	Aug 28 2009 03:32PM
Credit:	The disclosure of this issue has been credited to the vendor.
Vulnerable:	Sun ONE Web Server 6.1 Sun ONE Web Server 6.0 SP5 Sun ONE Web Server 6.0 SP4 Sun ONE Web Server 6.0 SP3 Sun ONE Web Server 6.0 SP2 Sun ONE Web Server 6.0 SP1 Sun ONE Web Server 6.0 Sun ONE Web Server 4.1 SP9 Sun ONE Web Server 4.1 SP8 Sun ONE Web Server 4.1 SP7 Sun ONE Web Server 4.1 SP6 Sun ONE Web Server 4.1 SP5 Sun ONE Web Server 4.1 SP5 Sun ONE Web Server 4.1 SP4 Sun ONE Web Server 4.1 SP3 Sun ONE Web Server 4.1 SP2 Sun ONE Web Server 4.1 SP12 Sun ONE Web Server 4.1 SP11 Sun ONE Web Server 4.1 SP10 Sun ONE Web Server 4.1 SP1 Sun ONE Web Server 4.1 Sun Java System Web Server 7.0 Plugin 0 + Sun N1 Service Provisioning System 6.0 + Sun N1 Service Provisioning System 6.0 + Sun N1 Service Provisioning System 5.2 + Sun N1 Service Provisioning System 5.2 Sun Java System Web Server 7.0 Update 3 Sun Java System Web Server 7.0 Update 2 Sun Java System Web Server 7.0 Update 1 Sun Java System Web Server 7.0

Not Vulnerable: