CVE-2007-6319 - Permissions, Privileges, and Access Control vulnerability in Lyris List Manager

Publication

2008-02-19

Last modification

2018-10-15

Summary

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."

Description

Lyris ListManager is prone to multiple remote vulnerabilities, including:- Two privilege-escalation vulnerabilities- A vulnerability that allows attackers to overwrite existing accounts.An attacker can exploit these issues to compromise the affected application, modify client-side information, overwrite arbitrary user accounts, and gain administrative access to the affected application. Other attacks are also possible.

Solution

The vendor released updates to address these issues. Please see the references for more information. Lyris ListManager 8.95a Lyris lm-8.95d-msde-win.exe ListManager for Windows Server http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-msde-win.e xe Lyris lm-8.95d-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-mssql-win. exe Lyris lm-8.95d-oracle10-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 10 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-l inux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle10-win.exe ListManager for Windows Oracle 10.1.0.2 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-w in.exe Lyris lm-8.95d-oracle9-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 9 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-li nux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle9-sparc.tar.gz ListManager for Solaris http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-sp arc.tar.gz Lyris lm-8.95d-oracle9-win.exe ListManager for Windows Oracle 9.2.0.1 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-wi n.exe Lyris lm-8.95d-pgsql-linux-rh-enterprise_3.tar.gz ListManager for Linux PostgreSQL http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-pgsql-linu x-rh-enterprise_3.tar.gz Lyris ListManager 9.2b Lyris lm-9.2c-msde-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-msde-win.exe Lyris lm-9.2c-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-mssql-win.ex e Lyris lm-9.2c-oracle10-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle10-lin ux-rh-enterprise_3.tar.gz Lyris lm-9.2c-oracle10-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle10-win .exe Lyris lm-9.2c-oracle9-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle9-linu x-rh-enterprise_3.tar.gz Lyris lm-9.2c-oracle9-sparc.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle9-spar c.tar.gz Lyris lm-9.2c-oracle9-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle9-win. exe Lyris lm-9.2c-pgsql-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-pgsql-linux- rh-enterprise_3.tar.gz Lyris ListManager 9.3a Lyris lm-9.3b-msde-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-msde-win.exe Lyris lm-9.3b-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-mssql-win.ex e Lyris lm-9.3b-oracle10-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-oracle10-lin ux-rh-enterprise_3.tar.gz Lyris lm-9.3b-oracle10-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/http://downloads.lyr is.com/listmanager/dist/v9.3b/http://downloads.lyris.com/listmanager/d ist/v9.3b/lm-9.3b-oracle10-win.exe Lyris lm-9.3b-oracle9-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-oracle9-linu x-rh-enterprise_3.tar.gz Lyris lm-9.3b-oracle9-sparc.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-oracle9-spar c.tar.gz Lyris lm-9.3b-oracle9-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/http://downloads.lyr is.com/listmanager/dist/v9.3b/lm-9.3b-oracle9-win.exe Lyris lm-9.3b-pgsql-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-pgsql-linux- rh-enterprise_3.tar.gz Lyris ListManager 8.95b Lyris lm-8.95d-msde-win.exe ListManager for Windows Server http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-msde-win.e xe Lyris lm-8.95d-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-mssql-win. exe Lyris lm-8.95d-oracle10-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 10 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-l inux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle10-win.exe ListManager for Windows Oracle 10.1.0.2 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-w in.exe Lyris lm-8.95d-oracle9-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 9 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-li nux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle9-sparc.tar.gz ListManager for Solaris http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-sp arc.tar.gz Lyris lm-8.95d-oracle9-win.exe ListManager for Windows Oracle 9.2.0.1 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-wi n.exe Lyris lm-8.95d-pgsql-linux-rh-enterprise_3.tar.gz ListManager for Linux PostgreSQL http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-pgsql-linu x-rh-enterprise_3.tar.gz Lyris ListManager 8.95c Lyris lm-8.95d-msde-win.exe ListManager for Windows Server http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-msde-win.e xe Lyris lm-8.95d-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-mssql-win. exe Lyris lm-8.95d-oracle10-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 10 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-l inux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle10-win.exe ListManager for Windows Oracle 10.1.0.2 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-w in.exe Lyris lm-8.95d-oracle9-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 9 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-li nux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle9-sparc.tar.gz ListManager for Solaris http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-sp arc.tar.gz Lyris lm-8.95d-oracle9-win.exe ListManager for Windows Oracle 9.2.0.1 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-wi n.exe Lyris lm-8.95d-pgsql-linux-rh-enterprise_3.tar.gz ListManager for Linux PostgreSQL http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-pgsql-linu x-rh-enterprise_3.tar.gz Lyris ListManager 8.95 Lyris lm-8.95d-msde-win.exe ListManager for Windows Server http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-msde-win.e xe Lyris lm-8.95d-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-mssql-win. exe Lyris lm-8.95d-oracle10-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 10 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-l inux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle10-win.exe ListManager for Windows Oracle 10.1.0.2 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle10-w in.exe Lyris lm-8.95d-oracle9-linux-rh-enterprise_3.tar.gz ListManager for Linux Oracle 9 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-li nux-rh-enterprise_3.tar.gz Lyris lm-8.95d-oracle9-sparc.tar.gz ListManager for Solaris http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-sp arc.tar.gz Lyris lm-8.95d-oracle9-win.exe ListManager for Windows Oracle 9.2.0.1 http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-oracle9-wi n.exe Lyris lm-8.95d-pgsql-linux-rh-enterprise_3.tar.gz ListManager for Linux PostgreSQL http://downloads.lyris.com/listmanager/dist/v8.95d/lm-8.95d-pgsql-linu x-rh-enterprise_3.tar.gz Lyris ListManager 9.2a Lyris lm-9.2c-msde-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-msde-win.exe Lyris lm-9.2c-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-mssql-win.ex e Lyris lm-9.2c-oracle10-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle10-lin ux-rh-enterprise_3.tar.gz Lyris lm-9.2c-oracle10-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle10-win .exe Lyris lm-9.2c-oracle9-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle9-linu x-rh-enterprise_3.tar.gz Lyris lm-9.2c-oracle9-sparc.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle9-spar c.tar.gz Lyris lm-9.2c-oracle9-win.exe http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-oracle9-win. exe Lyris lm-9.2c-pgsql-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.2c/lm-9.2c-pgsql-linux- rh-enterprise_3.tar.gz Lyris ListManager 9.3 Lyris lm-9.3b-msde-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-msde-win.exe Lyris lm-9.3b-mssql-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-mssql-win.ex e Lyris lm-9.3b-oracle10-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-oracle10-lin ux-rh-enterprise_3.tar.gz Lyris lm-9.3b-oracle10-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/http://downloads.lyr is.com/listmanager/dist/v9.3b/http://downloads.lyris.com/listmanager/d ist/v9.3b/lm-9.3b-oracle10-win.exe Lyris lm-9.3b-oracle9-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-oracle9-linu x-rh-enterprise_3.tar.gz Lyris lm-9.3b-oracle9-sparc.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-oracle9-spar c.tar.gz Lyris lm-9.3b-oracle9-win.exe http://downloads.lyris.com/listmanager/dist/v9.3b/http://downloads.lyr is.com/listmanager/dist/v9.3b/lm-9.3b-oracle9-win.exe Lyris lm-9.3b-pgsql-linux-rh-enterprise_3.tar.gz http://downloads.lyris.com/listmanager/dist/v9.3b/lm-9.3b-pgsql-linux- rh-enterprise_3.tar.gz

Exploit

Attackers can exploit these issues through a browser.

Classification

CWE-264 - Permissions, Privileges, and Access Control

Risk level (CVSS AV:N/AC:L/Au:N/C:C/I:C/A:C)

High

10.0

Access Vector

  • Network
  • Adjacent Network
  • Local

Access Complexity

  • Low
  • Medium
  • High

Authentication

  • None
  • Single
  • Multiple

Confident. Impact

  • Complete
  • Partial
  • None

Integrity Impact

  • Complete
  • Partial
  • None

Affected Products

Vendor Product Versions
Lyris List Manager  9.3 , 8.95 , 8.95A , 9.2B , 8.95C , 8.95B , 9.3A , 9.2A , 9.2