CVE-2005-4148

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-10 · updated 2026-06-16

Description

Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error message page.

Affected products

Lyris Technologies Inc Listmanager: 5.0, 6.0, 7.0, 8.0, 8.8a

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
http://metasploit.com/research/vulns/lyris_listmanager/
http://secunia.com/advisories/17943
http://www.osvdb.org/21552
http://www.securityfocus.com/archive/1/419077/100/0/threaded
http://www.securityfocus.com/bid/15789
http://www.vupen.com/english/advisories/2005/2820
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
http://metasploit.com/research/vulns/lyris_listmanager/
http://secunia.com/advisories/17943
http://www.osvdb.org/21552
http://www.securityfocus.com/archive/1/419077/100/0/threaded

Get alerted when CVE-2005-4148 or the next vulnerability affects your stack