CVE-2005-4149

Published: Dec 10, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.

Affected (5)

Products: Lyris Technologies Inc: Listmanager

Lyris Technologies Inc

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Lyris Technologies Inc Listmanager	Version 5.0
Lyris Technologies Inc Listmanager	Version 6.0
Lyris Technologies Inc Listmanager	Version 7.0
Lyris Technologies Inc Listmanager	Version 8.0
Lyris Technologies Inc Listmanager	Version 8.8a

References (10)

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html

Source: cve@mitre.org

http://metasploit.com/research/vulns/lyris_listmanager/

Source: cve@mitre.org

http://secunia.com/advisories/17943

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/419077/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2820

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://metasploit.com/research/vulns/lyris_listmanager/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17943

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/419077/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2820

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.