The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
No history.
Information
Published : 2014-12-24 18:59
Updated : 2024-02-28 12:20
NVD link : CVE-2004-2771
Mitre link : CVE-2004-2771
CVE.ORG link : CVE-2004-2771
JSON object : View
Products Affected
oracle
- linux
redhat
- enterprise_linux
heirloom
- mailx
bsd_mailx_project
- bsd_mailx
CWE
CWE-20
Improper Input Validation