CVE-2005-4699

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q_Host parameter.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-88

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.htmlBroken Link, Exploit, Patch, Vendor Advisory
http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txtExploit, Patch, Vendor Advisory
http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diffProduct
http://secunia.com/advisories/17078Broken Link, Patch, Vendor Advisory
http://www.osvdb.org/19871Broken Link, Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22522Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.htmlBroken Link, Exploit, Patch, Vendor Advisory
http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txtExploit, Patch, Vendor Advisory
http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diffProduct
http://secunia.com/advisories/17078Broken Link, Patch, Vendor Advisory
http://www.osvdb.org/19871Broken Link, Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22522Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-47005.0TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to obtain sensitive inform CVE-2005-47012.1Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as proce CVE-2005-47026.4SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL comma CVE-2005-47035.0Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains CVE-2005-47045.0Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is int CVE-2005-47055.0BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SS CVE-2005-47062.1Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) vi CVE-2005-47074.3Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via CVE-2005-47087.2Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service wit CVE-2005-47095.0The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains the threadPrincipal and CVE-2005-47104.6Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to "g CVE-2005-47116.8SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Refe