ISOMAN

CVE

CVE-2004-2771

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux7.9 x86_64 server dvdunknownsource
Oracle Linux7.9 x86_64 server bootunknownsource
Oracle Linux7.9 x86_64 server uek-bootunknownsource
Oracle Linux7.9 source source-dvd1unknownsource
Oracle Linux7.9 source source-dvd2unknownsource
Oracle Linux7.8 x86_64 server dvdunknownsource
Oracle Linux7.8 x86_64 server bootunknownsource
Oracle Linux7.8 x86_64 server uek-bootunknownsource
Oracle Linux7.8 source source-dvd1unknownsource
Oracle Linux7.8 source source-dvd2unknownsource
Oracle Linux7.7 x86_64 server dvdunknownsource
Oracle Linux7.7 x86_64 server bootunknownsource
Oracle Linux7.7 x86_64 server uek-bootunknownsource
Oracle Linux7.7 source source-dvd1unknownsource
Oracle Linux7.7 source source-dvd2unknownsource
Oracle Linux6.10 x86_64 server dvdunknownsource
Oracle Linux6.10 x86_64 server bootunknownsource
Oracle Linux6.10 x86_64 server uek-bootunknownsource
Oracle Linux6.10 source source-dvd1unknownsource
Oracle Linux6.10 source source-dvd2unknownsource
Oracle Linux6.9 x86_64 server dvdunknownsource
Oracle Linux6.9 x86_64 server bootunknownsource
Oracle Linux6.9 x86_64 server uek-bootunknownsource
Oracle Linux6.9 source source-dvd1unknownsource
Oracle Linux6.9 source source-dvd2unknownsource
Oracle Linux6.8 x86_64 server dvdunknownsource
Oracle Linux6.8 x86_64 server bootunknownsource
Oracle Linux6.8 x86_64 server uek-bootunknownsource
Oracle Linux6.8 source source-dvd1unknownsource
Oracle Linux6.8 source source-dvd2unknownsource
Oracle Linux7.9 aarch64 server dvdunknownsource
Oracle Linux7.9 aarch64 server uek-bootunknownsource
Oracle Linux7.8 aarch64 server dvdunknownsource
Oracle Linux7.8 aarch64 server uek-bootunknownsource
Oracle Linux7.7 aarch64 server dvdunknownsource
Oracle Linux7.7 aarch64 server uek-bootunknownsource

References

  1. http://linux.oracle.com/errata/ELSA-2014-1999.html
  2. http://rhn.redhat.com/errata/RHSA-2014-1999.html
  3. http://seclists.org/oss-sec/2014/q4/1066
  4. http://secunia.com/advisories/60940
  5. http://secunia.com/advisories/61585
  6. http://secunia.com/advisories/61693
  7. http://www.debian.org/security/2014/dsa-3105
  8. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748
  9. http://linux.oracle.com/errata/ELSA-2014-1999.html
  10. http://rhn.redhat.com/errata/RHSA-2014-1999.html
  11. http://seclists.org/oss-sec/2014/q4/1066
  12. http://secunia.com/advisories/60940
  13. http://secunia.com/advisories/61585
  14. http://secunia.com/advisories/61693
  15. http://www.debian.org/security/2014/dsa-3105
  16. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748