Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1219
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.006
Percentile
77.9%
paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator’s password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the administrator session.
Affected configurations
Node
php_arenapafiledbMatch3.1
Related
nessus
nessus
paFileDB sessions Directory Admin Hashed Password Disclosure
2004-12-06 00:00:00
paFileDB <= 3.1 Multiple Vulnerabilities (1)
2003-07-24 00:00:00
paFileDB <= 3.1 Multiple Vulnerabilities (2)
2005-03-15 00:00:00
cvelist
cvelist
CVE-2004-1219
2004-12-15 05:00:00
cve
cve
CVE-2004-1219
2005-01-10 05:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.006
Percentile
77.9%
Related for NVD:CVE-2004-1219