CVE-2005-4699: Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line a...

Security readout for executives and security teams

CVE-2005-4699 is a historical issue in TellMe 1.2 and earlier. A remote user could influence options passed to a Whois command through the q_Host parameter, potentially exposing sensitive information. The supplied data has no CVSS score and no confirmed active exploitation. Exposure is likely limited to legacy deployments of TellMe 1.2 or earlier, especially if the application is reachable by untrusted remote users. Modern environments are only exposed if this old software remains deployed. Prioritize as a legacy exposure check, not an emergency, unless TellMe is internet-facing or supports sensitive workflows. The main business risk is forgotten software leaking information through unsafe command invocation. Mitigation focus: Inventory for TellMe 1.2 or earlier installations.; Restrict public access to any identified TellMe deployment.; Review vendor guidance and the 1.2-to-1.3 diff before patching..

Prepared

Jun 29, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.