PT-2005-4847 · Lyris · Lyris Listmanager

Publicado 2005-12-10 · Atualizado 2018-10-19 · CVE-2005-4148

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lyris ListManager versions prior to 8.8

Description The issue allows remote attackers to obtain sensitive information, such as the installation path, by requesting a non-existent page and reading the env variable from the resulting error message page.

Recommendations For versions prior to 8.8, update to version 8.8 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-4148

Produtos afetados

Lyris Listmanager

Referências · 9

• 🔥 http://osvdb.org/21552 · Exploit
• 🔥 http://metasploit.com/research/vulns/lyris_listmanager · Exploit
• http://securityfocus.com/bid/15789 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html · Nota
• http://secunia.com/advisories/17943 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4148 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4148 · Nota de Segurança
• http://vupen.com/english/advisories/2005/2820 · Nota
• http://securityfocus.com/archive/1/419077/100/0/threaded · Nota