Every CVESearch/Get API key

CVE-2005-4145

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database...

6.5 MediumPublic exploit

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Exploit likelihood

43.9%Down 12.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.5

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
CVE-2005-4145
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
CVE-2005-4145
Updated
2026-11-02
EUVDEUVD-2005-4140No score

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
EUVD-2005-4140
Updated
2026-11-03
GitHub AdvisoriesGHSA-857q-ccvw-898pNo score

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database...

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Record
GHSA-857q-ccvw-898p
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitLyris ListManager MSDE Weak sa Password2005-12-08
Exploit-DBLyris ListManager - MSDE Weak sa Password (Metasploit)2010-09-20

History

History
RecordedChangedSources
exploits, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4145 is a medium vulnerability (CVSS 6.5) in Lyris Technologies Inc Listmanager, published December 10, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 43.9%, the 98th percentile. No source names a fixed version.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open