PT-2000-1690 · Lyris · Lyris Listmanager

Published 2000-10-20 · Updated 2008-09-05 · CVE-2000-0758

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lyris List Manager versions 3 and 4

Description The issue allows list subscribers to gain administrative access through the web interface by modifying the value of the list admin hidden form field.

Recommendations For Lyris List Manager versions 3 and 4, consider restricting access to the web interface until a fix is available, and avoid using the list admin hidden form field to prevent exploitation.

Fix

Related Identifiers

CVE-2000-0758

Affected Products

Lyris Listmanager

References · 5

• http://archives.neohapsis.com/archives/bugtraq/2000-08/0149.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0758 · Security Note
• http://securityfocus.com/bid/1584 · Vendor Advisory
• http://lyris.com/lm/lm_updates.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0758 · Note