PT-2005-4843 · Lyris · Lyris Listmanager

Published 2005-12-10 · Updated 2018-10-19 · CVE-2005-4144

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lyris ListManager versions 5.0 through 8.9a

Description The issue allows remote attackers to modify SQL queries by adding "ORDER BY" columns via unusual whitespace characters in the orderby parameter. These characters, including newlines and 0xFF (ASCII 255) characters, are interpreted as whitespace, potentially leading to unauthorized data access or manipulation.

Recommendations For versions 5.0 through 8.9a, consider restricting access to the orderby parameter to prevent the addition of malicious "ORDER BY" columns until a patch is available. As a temporary workaround, avoid using unusual whitespace characters in the orderby parameter.

Fix

Related Identifiers

CVE-2005-4144

Affected Products

Lyris Listmanager

References · 9

• http://osvdb.org/21549 · Patch
• http://secunia.com/advisories/17943 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4144 · Security Note
• http://metasploit.com/research/vulns/lyris_listmanager · Vendor Advisory
• http://securityfocus.com/bid/15787 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4144 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html · Note
• http://vupen.com/english/advisories/2005/2820 · Note
• http://securityfocus.com/archive/1/419077/100/0/threaded · Note