CVE-2005-4149

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
• metasploit.com/research/vulns/lyris_listmanager
• secunia.com/advisories/17943 · Vendor Advisory
• securityfocus.com/archive/1/419077/100/0/threaded
• vupen.com/english/advisories/2005/2820

listmanager のその他の脆弱性

• CVE-2005-4148中 5.0Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remot…
• CVE-2005-4147中 6.5The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a…
• CVE-2005-4146中 5.0Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which pro…
• CVE-2005-4145中 6.5The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space…
• CVE-2005-4142高 7.5The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote at…