TROYANOSYVIRUS
Back to CVEs

CVE-2004-2771

N/A

Description

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

CVE Details

CVSS v3.1 ScoreN/A
Published12/24/2014
Last Modified4/12/2025
Sourcenvd
Honeypot Sightings0

Affected Products

bsd_mailx_project:bsd_mailxheirloom:mailxoracle:linuxredhat:enterprise_linux

Weaknesses (CWE)

CWE-20

References

http://linux.oracle.com/errata/ELSA-2014-1999.html(af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-1999.html(af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/oss-sec/2014/q4/1066(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/60940(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/61585(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/61693(af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2014/dsa-3105(af854a3a-2127-422b-91ae-364da2661108)
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.