PT-2008-1548 · Lyris · Lyris Listmanager

Tyler Shields · Published 2008-02-19 · Updated 2018-10-15 · CVE-2007-6319

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lyris ListManager versions 8.x through 8.94 Lyris ListManager versions 9.2 through 9.2b Lyris ListManager versions 9.3 through 9.3a

Description The issue allows remote attackers to gain list administrator privileges or access arbitrary mailing lists via unknown vectors related to modification of client-side information. Additionally, remote authenticated administrators can modify other account data by creating new accounts that collide with existing accounts.

Recommendations For Lyris ListManager versions 8.x through 8.94, update to version 8.95d or later. For Lyris ListManager versions 9.2 through 9.2b, update to version 9.2c or later. For Lyris ListManager versions 9.3 through 9.3a, update to version 9.3b or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-6319

Affected Products

Lyris Listmanager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-6319 · Security Note
• http://securityfocus.com/bid/26792 · Patch
• http://vupen.com/english/advisories/2008/0618 · Note
• http://secunia.com/advisories/29019 · Note
• http://securityfocus.com/archive/1/488343/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6319 · Note
• http://securityreason.com/securityalert/3671 · Note
• http://securitytracker.com/id?1019436 · Note