CVE-2005-4700 | BDVDB-2026-14908 Detail

Description#

TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to obtain sensitive information via an invalid q_Host parameter, which reveals the full pathname of the application in an fsockopen error message.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/19872
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/22523
http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt
http://secunia.com/advisories/17078

Exploit#

No public exploit known

History#

Version 12006-02-01Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.