Strix
26.1K

CVE-2005-4147

UnknownEPSS 1.92%

Last modified

CVE-2005-4147 is a vulnerability of currently unknown severity. The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.. EPSS estimates a 1.92% chance of exploitation in the next 30 days.

Description

The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.

Metrics

EPSS Probability
1.92%

77.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
Lyris Technologies IncListmanager5.0
Lyris Technologies IncListmanager6.0
Lyris Technologies IncListmanager7.0
Lyris Technologies IncListmanager8.0
Lyris Technologies IncListmanager8.8a

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2005-4147?
The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.
How severe is CVE-2005-4147?
Severity scoring for CVE-2005-4147 is pending analysis. The EPSS model estimates a 1.92% probability of exploitation in the next 30 days.
How do I fix CVE-2005-4147?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2005

View all 2005CVEs →

Are you affected by CVE-2005-4147?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST