high7.8
CVE-2014-7844
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
Impact
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Enterprise Linux Desktop | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Server | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Server Aus | Versions 6.6, 7.3, 7.4, 7.6, 7.7 |
| Redhat | Enterprise Linux Server Eus | Versions 6.6, 7.2, 7.3, 7.4, 7.5, 7.6 |
| Redhat | Enterprise Linux Server Tus | Versions 6.6, 7.3, 7.6, 7.7 |
| Redhat | Enterprise Linux Workstation | Versions 6.0, 7.0 |
| Debian | Debian Linux | Version 7.0 |
| Bsd Mailx Project | Bsd Mailx | Version 8.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://linux.oracle.com/errata/ELSA-2014-1999.html
- http://rhn.redhat.com/errata/RHSA-2014-1999.html
- http://seclists.org/oss-sec/2014/q4/1066
- http://www.debian.org/security/2014/dsa-3104
- http://www.debian.org/security/2014/dsa-3105
- http://linux.oracle.com/errata/ELSA-2014-1999.html
- http://rhn.redhat.com/errata/RHSA-2014-1999.html
- http://seclists.org/oss-sec/2014/q4/1066
- http://www.debian.org/security/2014/dsa-3104
- http://www.debian.org/security/2014/dsa-3105