CVE-2007-6319 Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrar...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lyris list manager | = 8.95 | No fix listed |
| lyris list manager | = 8.95a | No fix listed |
| lyris list manager | = 8.95b | No fix listed |
| lyris list manager | = 8.95c | No fix listed |
| lyris list manager | = 9.2 | No fix listed |
| lyris list manager | = 9.2a | No fix listed |
| lyris list manager | = 9.2b | No fix listed |
| lyris list manager | = 9.3 | No fix listed |
| lyris list manager | = 9.3a | No fix listed |
References
- 29019 third-party-advisory
- 3671 third-party-advisory
- 1019436 vdb-entry
- 20080218 SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities mailing-list
- 26792 patch vdb-entry
- ADV-2008-0618 vdb-entry