CVE-2004-2398

CVE-2004-2398 describes a vulnerability in Netenberg Fantastico De Luxe 2.8, where database filenames reveal associated usernames. This allows local attackers to enumerate valid usernames, facilitating brute-force attacks, particularly when cPanel 9.3.0 R5 assigns world-readable permissions to /var/lib/mysql. The vulnerability has a low CVSS score of 2.1, indicating low severity due to requiring local access and only impacting confidentiality by disclosing usernames. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, suggesting it is not a high-priority threat.