CVE

Id
15352  
CVE No.
CVE-2005-4148  
Status
Candidate  
Description
Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error message page.  
Phase
Assigned (20051210)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
120083 15352 CVE-2005-4148 FULLDISC:20051208 PGP Wipe Free Space, Lyris ListManager Flaws, Windows Timestamps, Sam Juicer  View
120084 15352 CVE-2005-4148 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html  View
120085 15352 CVE-2005-4148 BUGTRAQ:20051209 PGP Wipe Free Space, Lyris ListManager Flaws, Windows Timestamps, Sam Juicer  View
120086 15352 CVE-2005-4148 URL:http://www.securityfocus.com/archive/1/archive/1/419077/100/0/threaded  View
120087 15352 CVE-2005-4148 MISC:http://metasploit.com/research/vulns/lyris_listmanager/  View
120088 15352 CVE-2005-4148 BID:15789  View
120089 15352 CVE-2005-4148 URL:http://www.securityfocus.com/bid/15789  View
120090 15352 CVE-2005-4148 VUPEN:ADV-2005-2820  View
120091 15352 CVE-2005-4148 URL:http://www.vupen.com/english/advisories/2005/2820  View
120092 15352 CVE-2005-4148 OSVDB:21552  View
120093 15352 CVE-2005-4148 URL:http://www.osvdb.org/21552  View
120094 15352 CVE-2005-4148 SECUNIA:17943  View

Related JVN