Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-4145.
PoCs published by Metasploit, hdm, including Metasploit module exploits/windows/mssql/lyris_listmanager_weak_pass.
AI-analyzed exploit summary This exploit targets a weak password vulnerability in Lyris ListManager's MSDE installation, where the 'sa' account password is either 'lminstall' or 'lyris' followed by a process ID. It brute-forces possible passwords and, upon successful authentication, uploads and executes a payload.
Description
The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.
Exploits (2)
This exploit targets a weak password vulnerability in Lyris ListManager's MSDE installation, where the 'sa' account password is either 'lminstall' or 'lyris' followed by a process ID. It brute-forces possible passwords and, upon successful authentication, uploads and executes a payload.
This Metasploit module exploits a weak password vulnerability in Lyris ListManager's MSDE installation, where the 'sa' account password is either 'lminstall' or 'lyris' followed by a process ID. It brute-forces all possible process IDs to gain authentication and then uploads and executes a payload.