CVE-2003-1567

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.htmlExploit
http://www.aqtronix.com/Advisories/AQ-2003-02.txtExploit
http://www.kb.cert.org/vuls/id/288308US Government Resource
http://www.osvdb.org/5648Exploit
http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.htmlExploit
http://www.aqtronix.com/Advisories/AQ-2003-02.txtExploit
http://www.kb.cert.org/vuls/id/288308US Government Resource
http://www.osvdb.org/5648Exploit
https://www.aqtronix.com/Advisories/AQ-2003-02.txt

Timeline

Published: Jan 15, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-15685.0GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an inval CVE-2003-15695.0GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP req CVE-2003-15703.5The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the s CVE-2003-15715.0Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dow CVE-2003-15729.3Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unaut CVE-2003-157310.0The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary program CVE-2003-15747.5TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related to CVE-2003-15754.6VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inher CVE-2003-157610.0Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform all CVE-2003-15772.6Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote CVE-2003-15784.3Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote CVE-2003-15794.3Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not i