OT: Seeing what this listserve runs on...

  • From: sbradcpa@xxxxxxxxxxx
  • To: isalist@xxxxxxxxxxxxx
  • Date: Fri, 9 Dec 2005 00:33:37 -0700

[ Lyris ListManager Multiple Flaws ]

The Lyris ListManager software is vulnerable to numerous SQL injection, 
source code dislosure, and authentication bypass flaws. The ListManager 
software runs on Linux, Solaris, and Windows and can be configured to use
one of the following database backends: PostgreSQL, Oracle, and 
MSSQL/MSDE. These flaws can be used to gain complete access to the 
ListManager data and often the host server itself.
- http://metasploit.com/research/vulns/lyris_listmanager/

Susan


Other related posts: