6852 matches found
CVE-2004-2771
CVE-2004-2771 affects mailx (Heirloom mailx <=12.5 and BSD mailx <=8.1.2). The vulnerability arises from parsing of email addresses, allowing a local attacker to cause mailx to execute arbitrary shell commands via shell metacharacters in the address. Several connected records corroborate im...
CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...
[SECURITY] [DSA 3105-1] heirloom-mailx security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3105-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3104-1] bsd-mailx security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3104-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...
CVE-2014-8142
CVE-2014-8142 is a use-after-free in PHP core (process_nested_data in var_unserializer.re) triggered by crafted serialized data with identical keys during unserialize. Affects PHP versions prior to 5.4.37, 5.5.x prior to 5.5.21, and 5.6.x prior to 5.6.5; exploitation can lead to remote code execu...
Updated nail package fixes security vulnerabilities
Updated nail package fixes security vulnerabilities: A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters and the direct command...
[SECURITY] [DLA 114-1] heirloom-mailx security update
Package : heirloom-mailx Version : 12.4-2+deb6u1 CVE ID : CVE-2004-2771 CVE-2014-7844 Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the "mail" command: CVE-2004-2771 mailx interprets interprets shell meta-characters in certain email addresses. CVE-2014-7844 ...
[SECURITY] [DLA 113-1] bsd-mailx security update
Package : bsd-mailx Version : 8.1.2-0.20100314cvs-1+deb6u1 CVE ID : CVE-2014-7844 It was discovered that bsd-mailx, an implementation of the "mail" command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can...
Debian DSA-3104-1 : bsd-mailx - security update
It was discovered that bsd-mailx, an implementation of the 'mail' command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can re-enable it using the 'expandaddr' in an appropriate mailrc file. This update also...
RHEL 6 / 7 : mailx (RHSA-2014:1999)
The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:1999 advisory. The mailx packages contain a mail user agent that is used to manage mail using scripts. A flaw was found in the way mailx handled the...
Scientific Linux Security Update : mailx on SL6.x, SL7.x i386/x86_64 (20141216)
A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters and the direct command execution functionality. CVE-2004-2771, CVE-2014-7844...
Debian DSA-3105-1 : heirloom-mailx - security update
Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the 'mail' command : - CVE-2004-2771 mailx interprets shell meta-characters in certain email addresses. - CVE-2014-7844 An unexpected feature of mailx treats syntactically valid email addresses as shell commands ...
Oracle Linux 6 / 7 : mailx (ELSA-2014-1999)
The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-1999 advisory. 12.4-8 - CVE-2004-2771 mailx: command execution flaw resolves: 1171175 Tenable has extracted the preceding description block directly from the Orac...
DLA-113-1 bsd-mailx - security update
Bulletin has no description...
DLA-114-1 heirloom-mailx - security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: mailx security update
Updated mailx packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...
mailx: command execution flaw
A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters CVE-2004-2771 and the direct command execution functionality CVE-2014-7844...
[SECURITY] [DSA 3105-1] heirloom-mailx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3105-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...
