Lyris ListManager Hidden Variable Information Disclosure Vulnerability

Bugtraq ID:	15789
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 09 2005 12:00AM
Updated:	Dec 09 2005 12:00AM
Credit:	H D Moore is credited with the discovery of this vulnerability.
Vulnerable:	Lyris List Manager 8.8 a Lyris List Manager 8.0 Lyris List Manager 7.0 Lyris List Manager 6.0 Lyris List Manager 5.0
Not Vulnerable:	Lyris List Manager 8.9 b

Lyris ListManager Hidden Variable Information Disclosure Vulnerability

Lyris ListManager is prone to an information disclosure vulnerability.

This vulnerability may be used to disclose the software version and software installation path, which may be helpful in further attacks.

Versions 5.0 through 8.8a are vulnerable; other versions may also be affected.

Lyris ListManager Hidden Variable Information Disclosure Vulnerability

No exploit is required.

Lyris ListManager Hidden Variable Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Lyris ListManager Hidden Variable Information Disclosure Vulnerability

References:

• List Manager Homepage (Lyris)
  
• Lyris Listmanager Multiple Vulnerabilities (Metasploit)