CVE-2004-2763
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-2763
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sun ONE/iPlanet Web Server HTTP TRACE信息窃取漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sun ONE/iPlanet是Sun公司推出的智能Web服务的软件组合系统，其中包含Sun ONE统一开发服务器，Sun ONE应用服务器可安装在Windows和Unix操作系统上。 Sun ONE/iPlanet对HTTP TRACE请求处理存在问题，远程攻击者可以利用这个漏洞窃取一些基于验证的如COOKIE等敏感信息 。问题是由于Sun ONE/iPlanet默认情况下对HTTP TRACE请求的应答处理不正确，结合跨站脚本问题及使用HTTP TRACE方法对Sun ONE/iPlanet服务器进行
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-2763
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-2763
Please Login to view more intelligence information
- http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.htmlvendor-advisoryx_refsource_SUNALERT
- https://nvd.nist.gov/vuln/detail/CVE-2004-2763
Same Patch Batch · n/a · 2009-06-01 · 20 CVEs total
| CVE-2009-1847 | Easy PX 41 CMS "index.php" 多个目录遍历漏洞 | |
| CVE-2003-1573 | Sun J2EE/RI Pointbase数据库远程命令执行漏洞 | |
| CVE-2003-1572 | Sun Java Media Framework未明远程拒绝服务攻击漏洞 | |
| CVE-2009-1854 | Cmsnx Million Dollar Text Links cookie权限管理和访问控制漏洞 | |
| CVE-2009-1853 | Kensei Board "index.php" SQL注入漏洞 | |
| CVE-2009-1852 | Graphiks MyForum Login 多个SQL注入漏洞 | |
| CVE-2009-1851 | Paessler phpBugTracker 'include.php' SQL注入漏洞 | |
| CVE-2009-1850 | Paessler phpBugTracker 'index.php' SQL注入漏洞 | |
| CVE-2009-1849 | PRTG Traffic Grapher Monitor_Bandwidth函数跨站脚本漏洞 | |
| CVE-2009-1848 | JoomlaMe AgoraGroups SQL注入漏洞 | |
| CVE-2008-6817 | Mole Group Lastminute Script明文信息泄露漏洞 | |
| CVE-2009-1846 | bjsintay sitex 多个目录遍历漏洞 | |
| CVE-2009-1845 | Lussumo Vanilla ajax/updatecheck.php模块跨站脚本漏洞 | |
| CVE-2009-1805 | VMware Workstation 驱动"Products Descheduled Time Accounting" 未明拒绝服务漏洞 | |
| CVE-2008-6819 | Microsoft Windows win32k.sys驱动本地权限提升漏洞 | |
| CVE-2009-1844 | Drupal Taxonomy Vocabulary 多个跨站脚本攻击漏洞 | |
| CVE-2009-1843 | Flash Quiz多个SQL注入漏洞 | |
| CVE-2009-1842 | PHP-Nuke 'userLog.php' SQL注入漏洞 | |
| CVE-2008-6818 | Mole Group Real Estate Script明文信息泄露漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2004-2763
No comments yet