CVE-2004-2771

2014-12-2418:59:00

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.027

Percentile

90.6%

JSON

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Affected configurations

Nvd

Node

oraclelinuxMatch6

oraclelinuxMatch7

Node

redhatenterprise_linuxMatch6.0

redhatenterprise_linuxMatch7.0

Node

bsd_mailx_projectbsd_mailxRange≤8.1.2

Node

heirloommailxRange≤12.5

VendorProductVersionCPE
oraclelinux6cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
oraclelinux7cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
redhatenterprise_linux6.0cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
redhatenterprise_linux7.0cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
bsd_mailx_projectbsd_mailx*cpe:2.3:a:bsd_mailx_project:bsd_mailx:*:*:*:*:*:*:*:*
heirloommailx*cpe:2.3:a:heirloom:mailx:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	linux	6	cpe:2.3:o:oracle:linux:6:::::::*
oracle	linux	7	cpe:2.3:o:oracle:linux:7:::::::*
redhat	enterprise_linux	6.0	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
redhat	enterprise_linux	7.0	cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
bsd_mailx_project	bsd_mailx	*	cpe:2.3:a:bsd_mailx_project:bsd_mailx::::::::
heirloom	mailx	*	cpe:2.3:a:heirloom:mailx::::::::