5

CVE-2005-4148

Exploit

EPSS 0.76%
Veröffentlicht 10.12.2005 11:03:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error message page.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Lyris Technologies Inc ≫ Listmanager Version5.0

Lyris Technologies Inc ≫ Listmanager Version6.0

Lyris Technologies Inc ≫ Listmanager Version7.0

Lyris Technologies Inc ≫ Listmanager Version8.0

Lyris Technologies Inc ≫ Listmanager Version8.8a

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.76%	0.71

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html

http://metasploit.com/research/vulns/lyris_listmanager/

Exploit

http://secunia.com/advisories/17943

Patch

Vendor Advisory

http://www.securityfocus.com/archive/1/419077/100/0/threaded

http://www.vupen.com/english/advisories/2005/2820

http://www.osvdb.org/21552

Exploit

http://www.securityfocus.com/bid/15789

https://nvd.nist.gov/vuln/detail/CVE-2005-4148

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4148

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4148

EUVD