Every CVE Search/ Get API key

CVE-2005-4145

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database...

6.5 MediumPublic exploit

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Exploit likelihood

43.9%Down 12.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
CVE-2005-4145
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
CVE-2005-4145
Updated
2026-11-02
EUVDEUVD-2005-4140 No score

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
EUVD-2005-4140
Updated
2026-11-03
GitHub AdvisoriesGHSA-857q-ccvw-898p No score

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database...

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
GHSA-857q-ccvw-898p
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLyris ListManager - MSDE Weak sa Password (Metasploit)2010-09-20
MetasploitLyris ListManager MSDE Weak sa Password2005-12-08

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4145 is a medium vulnerability (CVSS 6.5) in Lyris Technologies Inc Listmanager, published December 10, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 43.9%, the 98th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open