CVE-2005-4142 - CVE House
Back to Database
Status published High CVE-2005-4142

The web interface for subscribing new users in Lyris ListManager...

Vulnerability Description

The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter. NOTE: it is not clear whether this is a variant of a CRLF injection vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4142

Credits & Attribution

No credits recorded in the NVD database.

References

More from lyris technologies inc

View All →
CVE-2005-4149
Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain...
Medium 5
CVE-2005-4148
Lyris ListManager 8.5, and possibly other versions before 8.8, includes...
Medium 5
CVE-2005-4147
The TCLHTTPd service in Lyris ListManager before 8.9b allows remote...
Medium 6.5
CVE-2005-4146
Lyris ListManager before 8.9b allows remote attackers to obtain sensitive...
Medium 5
CVE-2005-4145
The MSDE version of Lyris ListManager 5.0 through 8.9b configures...
Medium 6.5

Affected Vendor

lyris technologies inc

View all reports →

Affected Software

listmanager
Vulnerable Versions:
5.0, 6.0, 7.0, 8.0, 8.8a

Timeline

Official Publish: December 10th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.