Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2004-2771HistoryDec 24, 2014 - 6:59 p.m.
CVE-2004-2771
2014-12-2418:59:00
Debian Security Bug Tracker
security-tracker.debian.org
7
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.031 Low
EPSS
Percentile
91.0%
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | bsd-mailx | <Â 8.1.2-0.20071201cvs-1 | bsd-mailx_8.1.2-0.20071201cvs-1_all.deb |
| Debian | 11 | all | bsd-mailx | <Â 8.1.2-0.20071201cvs-1 | bsd-mailx_8.1.2-0.20071201cvs-1_all.deb |
| Debian | 10 | all | bsd-mailx | <Â 8.1.2-0.20071201cvs-1 | bsd-mailx_8.1.2-0.20071201cvs-1_all.deb |
| Debian | 999 | all | bsd-mailx | <Â 8.1.2-0.20071201cvs-1 | bsd-mailx_8.1.2-0.20071201cvs-1_all.deb |
| Debian | 13 | all | bsd-mailx | <Â 8.1.2-0.20071201cvs-1 | bsd-mailx_8.1.2-0.20071201cvs-1_all.deb |
Related
cvelist
cvelist
CVE-2004-2771
2014-12-24 18:00:00
veracode
veracode
Arbitrary Command Execution
2019-01-15 09:03:48
osv
osv
bsd-mailx - security update
2014-12-17 00:00:00
bsd-mailx - security update
2014-12-16 00:00:00
heirloom-mailx - security update
2014-12-16 00:00:00
ubuntucve
ubuntucve
CVE-2004-2771
2014-12-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2004-2771 affecting package mailx for versions less than 12.5-34
2022-04-09 15:40:01
CVE-2004-2771 affecting package mailx for versions less than 12.5-34
2022-04-09 15:40:01
CVE-2004-2771 affecting package mailx for versions less than 12.5-36
2024-04-03 00:40:51
cve
cve
CVE-2004-2771
2014-12-24 18:59:00
nessus
nessus
OracleVM 3.3 : mailx (OVMSA-2014-0086)
2014-12-29 00:00:00
Fedora 21 : mailx-12.5-14.fc21 (2014-17243)
2015-01-05 00:00:00
Fedora 19 : mailx-12.5-9.fc19 (2014-17277)
2015-01-05 00:00:00
debian
debian
[SECURITY] [DLA 114-1] heirloom-mailx security update
2014-12-17 16:35:55
[SECURITY] [DSA 3105-1] heirloom-mailx security update
2014-12-16 17:56:53
[SECURITY] [DLA 113-1] bsd-mailx security update
2014-12-17 16:09:32
securityvulns
securityvulns
[SECURITY] [DSA 3104-1] bsd-mailx security update
2014-12-22 00:00:00
Different mailx versions security vulnerabilities
2014-12-22 00:00:00
[SECURITY] [DSA 3105-1] heirloom-mailx security update
2014-12-22 00:00:00
centos
centos
mailx security update
2014-12-16 20:39:59
openvas
openvas
Debian: Security Advisory (DSA-3104-1)
2014-12-15 00:00:00
Fedora Update for mailx FEDORA-2014-17277
2015-01-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0538)
2022-01-28 00:00:00
slackware
slackware
[slackware-security] mailx
2016-03-03 06:56:13
gentoo
gentoo
mailx: Multiple vulnerabilities
2018-04-08 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mailx-12.5-11.fc20
2015-01-03 19:11:05
[SECURITY] Fedora 19 Update: mailx-12.5-9.fc19
2015-01-03 19:03:14
[SECURITY] Fedora 21 Update: mailx-12.5-14.fc21
2015-01-03 19:09:28
oraclelinux
oraclelinux
mailx security update
2014-12-16 00:00:00
f5
f5
SOL16945 - Mailx vulnerabilities CVE-2004-2771 and CVE-2014-7844
2015-07-10 00:00:00
K16945 : Mailx vulnerabilities CVE-2004-2771 and CVE-2014-7844
2015-07-10 00:00:00
amazon
amazon
Medium: mailx
2015-01-08 11:37:00
mageia
mageia
Updated nail package fixes security vulnerabilities
2014-12-19 18:06:35
redhat
redhat
(RHSA-2014:1999) Moderate: mailx security update
2014-12-16 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.031 Low
EPSS
Percentile
91.0%
Related for DEBIANCVE:CVE-2004-2771