« Volver al listado

CVE-2007-6319

Estado: ModificadaAlta (10)—

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Lyris — List Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-6319",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-02-19T22:44:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/29019",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3671",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1019436",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/488343/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26792",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/0618",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/29019",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/3671",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1019436",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/488343/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26792",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/0618",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        },
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating \"new accounts that collide with existing accounts.\""
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas en Lyris ListManager 8.x versiones posteriores a la 8.95d, 9.2  versiones posteriores a la 9.2c y 9.3 versiones posteriores a la 9.3b, permiten a atacantes remotos (1) conseguir privilegios de administrador o (2) acceder a listas de correo de su elección a través de vectores no conocidos relacionados con la modificación de la información de la parte cliente y (3) permitir a administradores remotos autenticados modificar datos de otra cuenta creando “nuevas cuentas que colisionan con otras ya existentes”"
    }
  ],
  "lastModified": "2026-06-16T22:47:49.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73133FFC-F2D6-44FB-A0EB-B8032BE1E45D"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:8.95a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0A40E4E-E122-49F9-9BBE-D3D147E219AF"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:8.95b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B50A3C7E-7BD3-4811-A48B-C1DE1FA2290D"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:8.95c:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1723FC6E-0A53-444A-8FB1-DAB0F8C0F95F"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "666997DC-6DFC-4E69-B756-73AC512744EE"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:9.2a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDD4E440-95BB-4B79-A6C1-D5B7E2D9E2D6"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:9.2b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD10C9A9-7F4E-4177-BD91-297EBCF70A30"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03038BF0-4B6D-4E54-8D94-70CF0AC9CCE3"
            },
            {
              "criteria": "cpe:2.3:a:lyris:list_manager:9.3a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A484B37E-8DB3-405B-863A-A3D4ECE1AEF2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}