CVEvulnerability
CVE-2004-2771
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-12-24
- Last modified
- 2026-09-23
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Affected configurations
• oracle linux 6
• oracle linux 7
• redhat enterprise linux 6.0
• redhat enterprise linux 7.0
• bsd mailx project bsd mailx (<= 8.1.2)
• heirloom mailx (<= 12.5)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://linux.oracle.com/errata/ELSA-2014-1999.html linux.oracle.com
- http://rhn.redhat.com/errata/RHSA-2014-1999.html rhn.redhat.com
- http://seclists.org/oss-sec/2014/q4/1066 seclists.org
- http://secunia.com/advisories/60940 secunia.com
- http://secunia.com/advisories/61585 secunia.com
- http://secunia.com/advisories/61693 secunia.com
- http://www.debian.org/security/2014/dsa-3105 www.debian.org
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748 Exploit
- http://linux.oracle.com/errata/ELSA-2014-1999.html linux.oracle.com
- http://rhn.redhat.com/errata/RHSA-2014-1999.html rhn.redhat.com
- http://seclists.org/oss-sec/2014/q4/1066 seclists.org
- http://secunia.com/advisories/60940 secunia.com
- http://secunia.com/advisories/61585 secunia.com
- http://secunia.com/advisories/61693 secunia.com
- http://www.debian.org/security/2014/dsa-3105 www.debian.org
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748 Exploit