PT-2005-4843 · Lyris · Lyris Listmanager

Publicado 2005-12-10 · Atualizado 2018-10-19 · CVE-2005-4144

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lyris ListManager versions 5.0 through 8.9a

Description The issue allows remote attackers to modify SQL queries by adding "ORDER BY" columns via unusual whitespace characters in the orderby parameter. These characters, including newlines and 0xFF (ASCII 255) characters, are interpreted as whitespace, potentially leading to unauthorized data access or manipulation.

Recommendations For versions 5.0 through 8.9a, consider restricting access to the orderby parameter to prevent the addition of malicious "ORDER BY" columns until a patch is available. As a temporary workaround, avoid using unusual whitespace characters in the orderby parameter.

Correção

Identificadores relacionados

CVE-2005-4144

Produtos afetados

Lyris Listmanager

Referências · 9

• http://osvdb.org/21549 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4144 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html · Nota
• http://secunia.com/advisories/17943 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4144 · Nota de Segurança
• http://metasploit.com/research/vulns/lyris_listmanager · Aviso do Fabricante
• http://securityfocus.com/bid/15787 · Correção
• http://vupen.com/english/advisories/2005/2820 · Nota
• http://securityfocus.com/archive/1/419077/100/0/threaded · Nota