Vulnerability Details : CVE-2005-4147
The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.
Exploit prediction scoring system (EPSS) score for CVE-2005-4147
Probability of exploitation activity in the next 30 days: 2.66%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 89 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2005-4147
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
NIST |
References for CVE-2005-4147
Products affected by CVE-2005-4147
- cpe:2.3:a:lyris_technologies_inc:listmanager:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:lyris_technologies_inc:listmanager:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:lyris_technologies_inc:listmanager:8.8a:*:*:*:*:*:*:*
- cpe:2.3:a:lyris_technologies_inc:listmanager:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:lyris_technologies_inc:listmanager:6.0:*:*:*:*:*:*:*