Lucene search

K
cveMitreCVE-2005-4699
HistoryFeb 01, 2006 - 8:00 p.m.

CVE-2005-4699

2006-02-0120:00:00
CWE-88
mitre
web.nvd.nist.gov
19
tellme
argument injection
vulnerability
remote attackers
sensitive information

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.009

Percentile

82.3%

Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via “–” style options in the q_Host parameter.

Affected configurations

Nvd
Node
kimihiatellmeRange1.2
VendorProductVersionCPE
kimihiatellme*cpe:2.3:a:kimihia:tellme:*:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.009

Percentile

82.3%

Related for CVE-2005-4699