{"uuid": "dc8a4a1a-87f5-4647-ae83-a771ae6f51c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-4145", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/lyris_listmanager_weak_pass.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [1433, 1434, 1435, 14330, 2533, 9152, 2638], \"autofilter_services\": [\"ms-sql-s\", \"ms-sql2000\", \"sybase\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a weak password vulnerability in the\\n          Lyris ListManager MSDE install. During installation, the 'sa'\\n          account password is set to 'lminstall'. Once the install\\n          completes, it is set to 'lyris' followed by the process\\n          ID of the installer. This module brute forces all possible\\n          process IDs that would be used by the installer.\", \"disclosure_date\": \"2005-12-08\", \"fullname\": \"exploit/windows/mssql/lyris_listmanager_weak_pass\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Lyris ListManager MSDE Weak sa Password\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/mssql/lyris_listmanager_weak_pass.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/mssql/lyris_listmanager_weak_pass\", \"references\": [\"CVE-2005-4145\", \"OSVDB-21559\"], \"rport\": 1433, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:23.311099Z"}