PT-2008-1548 · Lyris · Lyris Listmanager

Tyler Shields · Publicado 2008-02-19 · Atualizado 2018-10-15 · CVE-2007-6319

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lyris ListManager versions 8.x through 8.94 Lyris ListManager versions 9.2 through 9.2b Lyris ListManager versions 9.3 through 9.3a

Description The issue allows remote attackers to gain list administrator privileges or access arbitrary mailing lists via unknown vectors related to modification of client-side information. Additionally, remote authenticated administrators can modify other account data by creating new accounts that collide with existing accounts.

Recommendations For Lyris ListManager versions 8.x through 8.94, update to version 8.95d or later. For Lyris ListManager versions 9.2 through 9.2b, update to version 9.2c or later. For Lyris ListManager versions 9.3 through 9.3a, update to version 9.3b or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-6319

Produtos afetados

Lyris Listmanager

Referências · 8

• http://vupen.com/english/advisories/2008/0618 · Nota
• http://secunia.com/advisories/29019 · Nota
• http://securityfocus.com/archive/1/488343/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6319 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6319 · Nota
• http://securityfocus.com/bid/26792 · Correção
• http://securityreason.com/securityalert/3671 · Nota
• http://securitytracker.com/id?1019436 · Nota