Skip to main content

CVE-2005-4145

6.5
CVSS v2.0 Base Score
64.83%
MEDIUM RiskEPSS (98th percentile)
NVD-CWE-Other

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.

Published: 12/10/2005
Modified: 4/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

6.5

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS Score (Exploitation Probability)

64.83%MEDIUM Exploitation Risk
98th percentile

This vulnerability has a 64.83% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.

CWE Classification

NVD-CWE-Other