CVE-2004-2398

State: Published
Severity: Not scored
Published: Aug 17, 2005
Updated: Aug 8, 2024
Reserved: Aug 17, 2005

Description

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

cpanel-fantastico-obtain-information(16197)vdb-entry
20040519 Non-logged Brute Force Attack Vulnerability for Fantastico-Created Databases on cPanel Based Hostsmailing-list
10390vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.