CVE-2005-4145

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to…

published December 10, 2005

CVSS
—
EPSS
44%
Percentile
98.7
In the wild
Unconfirmed
What it is

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.43919 · 98.7th percentile
Published
2005-12-10T11:00Z
EPSS history
Timeline
  • 10 DEC 11:00Z
    The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to…
    cvelistv5