PatchTheCVEtellme vulnerabilities and fixes
Recent CVEs affecting tellme, with upgrade or downgrade steps. 3 tracked.
tellme has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2005-12-31. Highest priority: CVE-2005-4699 (score 47/100).
- CVE-2005-4700 MEDIUM 5.0 DOWNGRADE TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attack
- CVE-2005-4699 MEDIUM 6.4 UPGRADE Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line argu
- CVE-2005-4698 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary
FAQ
How do I fix tellme vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tellme being exploited right now?
None of the tracked tellme CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tellme CVE should I patch first?
CVE-2005-4699 currently ranks highest (47/100): Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line argu.