Lucene search
+L

1024 matches found

The Hacker News
The Hacker News
added 2015/01/18 7:52 p.m.11 views

Verizon FiOS app vulnerability Exposes 5 MILLION Customers' Email Addresses

A critical vulnerability discovered in Verizon's FiOS mobile application allowed an attacker to access the email account of any Verizon customer with relative ease, leaving almost five million user accounts of Verizon's FiOS application at risk. The FiOS API flaw was discovered by XDA senior...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/01/09 12:0 a.m.31 views

Mandriva Linux Security Advisory : nail (MDVSA-2015:011)

Updated nail package fixes security vulnerabilities : A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters and the direct command...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/01/09 12:0 a.m.31 views

Amazon Linux AMI : mailx (ALAS-2015-467)

A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters and the direct command execution functionality. CVE-2004-2771 , CVE-2014-7844...

7.8CVSS7.6AI score0.06858EPSS
SaveExploits1References3
Amazon
Amazon
added 2015/01/08 12:0 a.m.44 views

Medium: mailx

Issue Overview: A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters and the direct command execution functionality. CVE-2004-2771...

7.8CVSS8AI score0.06858EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2014/12/26 12:0 a.m.36 views

SuSE 11.3 Security Update : mailx (SAT Patch Number 10096)

This mailx update fixes the following security issues : - Shell command injection via crafted email addresses. CVE-2004-2771 / CVE-2014-7844. bnc909208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

7.8CVSS8.3AI score0.06858EPSS
SaveExploits1References5
OSV
OSV
added 2014/12/24 6:59 p.m.12 views

AZL-6676 CVE-2004-2771 affecting package mailx for versions less than 12.5-34

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...

7.5CVSS7.5AI score0.06858EPSS
SaveExploits1References1
OSV
OSV
added 2014/12/17 12:0 a.m.23 views

DLA-113-1 bsd-mailx - security update

Bulletin has no description...

7.8CVSS7.5AI score0.0155EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2014/12/17 12:0 a.m.23 views

Debian DSA-3104-1 : bsd-mailx - security update

It was discovered that bsd-mailx, an implementation of the 'mail' command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can re-enable it using the 'expandaddr' in an appropriate mailrc file. This update also...

7.8CVSS7.3AI score0.06858EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2014/12/17 12:0 a.m.41 views

Debian DSA-3105-1 : heirloom-mailx - security update

Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the 'mail' command : - CVE-2004-2771 mailx interprets shell meta-characters in certain email addresses. - CVE-2014-7844 An unexpected feature of mailx treats syntactically valid email addresses as shell commands ...

7.8CVSS7.5AI score0.06858EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2014/12/17 12:0 a.m.52 views

CentOS 6 / 7 : mailx (CESA-2014:1999)

Updated mailx packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1References4
Cent OS
Cent OS
added 2014/12/16 8:39 p.m.404 views

mailx security update

CentOS Errata and Security Advisory CESA-2014:1999 Updated mailx packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

7.8CVSS7.4AI score0.06858EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2014/12/16 7:44 p.m.29 views

Moderate: Red Hat Security Advisory: mailx security update

Updated mailx packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

7.8CVSS7.4AI score0.06858EPSS
SaveExploits1References2
Debian
Debian
added 2014/12/16 5:56 p.m.50 views

[SECURITY] [DSA 3105-1] heirloom-mailx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3105-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...

7.8CVSS8.5AI score0.06858EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2014/12/16 12:0 a.m.25 views

Debian Security Advisory DSA 3105-1 (heirloom-mailx - security update)

Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the mail command: CVE-2004-2771 mailx interprets interprets shell meta-characters in certain email addresses. CVE-2014-7844 An unexpected feature of mailx treats syntactically valid email addresses as shell...

7.5CVSS0.3AI score0.06858EPSS
SaveExploits1References1
OSV
OSV
added 2014/12/16 12:0 a.m.31 views

DSA-3105-1 heirloom-mailx - security update

Bulletin has no description...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1
OSV
OSV
added 2014/12/16 12:0 a.m.32 views

DSA-3104-1 bsd-mailx - security update

Bulletin has no description...

7.8CVSS7.5AI score0.0155EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2014/12/15 12:0 a.m.28 views

Debian: Security Advisory (DSA-3105-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1References3
ThreatPost
ThreatPost
added 2014/11/26 8:18 a.m.7 views

Home Depot Breach Cost Company $43 Million in Third Quarter

The massive Home Depot data breach disclosed earlier this fall involved the theft of 56 million credit and debit card numbers, and now the company has revealed that the incident so far has cost it $43 million. The costs are the result of both the investigation into the data breach as well as the...

0.5AI score
SaveExploits0References2
n0where
n0where
added 2014/11/10 7:1 p.m.39 views

How To Setup Postfix

How To Setup Postfix Postfix is a very popular open source Mail Transfer Agent MTA that can be used to route and deliver email on a Linux system. It is estimated that around 25% of public mail servers on the internet run Postfix. In this guide, we’ll teach you how to get up and running quickly wi...

6.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2014/11/07 7:3 a.m.11 views

Home Depot data breach 53 million email addresses stolen

Home Depot said Thursday that its network was breached by hackers using stolen credentials from a third-party vendor to not only make off with 56 million payment card numbers, but also 53 million email addresses. The giant retailer warned affected customers to be on the lookout for phishing scams...

0.1AI score
SaveExploits0References4
Rows per page
Query Builder