CVE-2006-1119: Medium severity Netenberg Fantastico De Luxe vulnerability
fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1119?
CVE-2006-1119 is considered to have a medium severity due to the potential exposure of sensitive file path information.
How does CVE-2006-1119 affect Fantastico in Cpanel?
CVE-2006-1119 affects Fantastico in Cpanel by allowing remote authenticated users to view full pathnames through PHP error messages.
Who is at risk from CVE-2006-1119?
Remote authenticated users are at risk from CVE-2006-1119 as they can exploit the vulnerability to obtain sensitive information.
How do I fix CVE-2006-1119?
To fix CVE-2006-1119, ensure proper filesystem permissions are set to avoid PHP error message disclosures.
What versions of Fantastico are affected by CVE-2006-1119?
CVE-2006-1119 affects all versions of Fantastico De Luxe prior to the patch that addressed this vulnerability.