The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
20 Nov 2024, 23:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://linux.oracle.com/errata/ELSA-2014-1999.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2014-1999.html - | |
References | () http://seclists.org/oss-sec/2014/q4/1066 - | |
References | () http://secunia.com/advisories/60940 - | |
References | () http://secunia.com/advisories/61585 - | |
References | () http://secunia.com/advisories/61693 - | |
References | () http://www.debian.org/security/2014/dsa-3105 - | |
References | () https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748 - Exploit |
Information
Published : 2014-12-24 18:59
Updated : 2024-11-20 23:54
NVD link : CVE-2004-2771
Mitre link : CVE-2004-2771
CVE.ORG link : CVE-2004-2771
JSON object : View
Products Affected
heirloom
- mailx
oracle
- linux
redhat
- enterprise_linux
bsd_mailx_project
- bsd_mailx
CWE
CWE-20
Improper Input Validation