Lucene search
Redhat.comRH:CVE-2007-3008HistoryOct 30, 2015 - 9:28 a.m.
CVE-2007-3008
2015-10-3009:28:33
redhat.com
access.redhat.com
13
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.008
Percentile
81.9%
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398.
Related
cve
cve
prion
prion
Cross site scripting
2007-06-04 17:30:00
Design/Logic Flaw
2010-01-25 19:30:00
Design/Logic Flaw
2010-01-25 19:30:00
cvelist
cvelist
nvd
nvd
nessus
nessus
HTTP Reverse Proxy Detection (Deprecated)
2002-07-02 00:00:00
WebLogic < 8.1 SP3 Multiple Vulnerabilities
2004-09-14 00:00:00
Solaris 9 (sparc) : 116807-02
2004-07-12 00:00:00
f5
f5
SOL15904 - Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
K15904 : Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
openvas
openvas
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02
2009-06-03 00:00:00
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
2009-06-03 00:00:00
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
2009-06-03 00:00:00
metasploit
metasploit
HTTP Cross-Site Tracing Detection
2011-11-03 20:09:11
HTTP Options Detection
2009-04-13 14:33:26
redhatcve
redhatcve
CVE-2004-2320
2015-10-30 09:39:58
pentestpartners
pentestpartners
Vulnerabilities that aren’t. Cross Site Tracing / XST
2022-01-25 06:08:46
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.008
Percentile
81.9%
Related for RH:CVE-2007-3008