PatchTheCVElistmanager vulnerabilities and fixes
Recent CVEs affecting listmanager, with upgrade or downgrade steps. 6 tracked.
listmanager has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-12-10. Highest priority: CVE-2005-4142 (score 53/100).
- CVE-2005-4149 MEDIUM 5.0 DOWNGRADE Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors i
- CVE-2005-4148 MEDIUM 5.0 DOWNGRADE Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidde
- CVE-2005-4147 MEDIUM 6.5 DOWNGRADE The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitr
- CVE-2005-4146 MEDIUM 5.0 DOWNGRADE Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCL
- CVE-2005-4145 MEDIUM 6.5 DOWNGRADE The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a pass
- CVE-2005-4142 HIGH 7.5 DOWNGRADE The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line
FAQ
How do I fix listmanager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is listmanager being exploited right now?
None of the tracked listmanager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which listmanager CVE should I patch first?
CVE-2005-4142 currently ranks highest (53/100): The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line .