5
CVE-2004-1219
- EPSS 2.3%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:07:16
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginpaFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the administrator session.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.3% | 0.81 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://echo.or.id/adv/adv09-y3dips-2004.txt
http://marc.info/?l=bugtraq&m=110245123927025&w=2
http://www.securityfocus.com/bid/11818
https://exchange.xforce.ibmcloud.com/vulnerabilities/18364