high7.5
CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell…
Impact
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Linux | Versions 6, 7 |
| Redhat | Enterprise Linux | Versions 6.0, 7.0 |
| Bsd Mailx Project | Bsd Mailx | through 8.1.2 |
| Heirloom | Mailx | through 12.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://linux.oracle.com/errata/ELSA-2014-1999.html
- http://rhn.redhat.com/errata/RHSA-2014-1999.html
- http://seclists.org/oss-sec/2014/q4/1066
- http://secunia.com/advisories/60940
- http://secunia.com/advisories/61585
- http://secunia.com/advisories/61693
- http://www.debian.org/security/2014/dsa-3105
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748
- http://linux.oracle.com/errata/ELSA-2014-1999.html
- http://rhn.redhat.com/errata/RHSA-2014-1999.html
- http://seclists.org/oss-sec/2014/q4/1066
- http://secunia.com/advisories/60940
- http://secunia.com/advisories/61585
- http://secunia.com/advisories/61693
- http://www.debian.org/security/2014/dsa-3105
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748