CVEvulnerability
CVE-2007-6319
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."
Affected configurations
• lyris list manager 8.95
• lyris list manager 8.95a
• lyris list manager 8.95b
• lyris list manager 8.95c
• lyris list manager 9.2
• lyris list manager 9.2a
• lyris list manager 9.2b
• lyris list manager 9.3
• lyris list manager 9.3a
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/29019 secunia.com
- http://securityreason.com/securityalert/3671 securityreason.com
- http://securitytracker.com/id?1019436 securitytracker.com
- http://www.securityfocus.com/archive/1/488343/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26792 Patch
- http://www.vupen.com/english/advisories/2008/0618 www.vupen.com
- http://secunia.com/advisories/29019 secunia.com
- http://securityreason.com/securityalert/3671 securityreason.com
- http://securitytracker.com/id?1019436 securitytracker.com
- http://www.securityfocus.com/archive/1/488343/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26792 Patch
- http://www.vupen.com/english/advisories/2008/0618 www.vupen.com