The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8 9 and 10 enables the HTTP TRACE method which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.