VulnerabilityModified
CVE-2005-4699
Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q_Host parameter.
MEDIUM 6.4EPSS 1.86%
Does this matter?
Lower severity and a low EPSS score (1.86%). Track it; it rarely justifies an emergency change on its own.
Description
Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q_Host parameter.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.86% probability · 78th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-88
- Affected
- kimihia/tellme
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.htmlBroken Link, Exploit, Patch, Vendor Advisory
- http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txtExploit, Patch, Vendor Advisory
- http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diffProduct
- http://secunia.com/advisories/17078Broken Link, Patch, Vendor Advisory
- http://www.osvdb.org/19871Broken Link, Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22522Third Party Advisory, VDB Entry
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.htmlBroken Link, Exploit, Patch, Vendor Advisory
- http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txtExploit, Patch, Vendor Advisory
- http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diffProduct
- http://secunia.com/advisories/17078Broken Link, Patch, Vendor Advisory
- http://www.osvdb.org/19871Broken Link, Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22522Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.