Lucene search
+L

190 matches found

OSV
OSV
added 2014/12/17 12:00 a.m.50 views

DLA-114-1 heirloom-mailx - security update

Bulletin has no description...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2014/12/17 12:00 a.m.28 views

Scientific Linux Security Update : mailx on SL6.x, SL7.x i386/x86_64 (20141216)

A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters and the direct command execution functionality. CVE-2004-2771, CVE-2014-7844...

7.8CVSS7.6AI score0.06858EPSS
SaveExploits1References3
OSV
OSV
added 2014/12/17 12:00 a.m.28 views

DLA-113-1 bsd-mailx - security update

Bulletin has no description...

7.8CVSS7.5AI score0.0155EPSS
SaveExploits0
Cent OS
Cent OS
added 2014/12/16 8:39 p.m.406 views

mailx security update

CentOS Errata and Security Advisory CESA-2014:1999 Updated mailx packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

7.8CVSS7.4AI score0.06858EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2014/12/16 7:44 p.m.31 views

Moderate: Red Hat Security Advisory: mailx security update

Updated mailx packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

7.8CVSS7.4AI score0.06858EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2014/12/16 7:44 p.m.11 views

mailx: command execution flaw

A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters CVE-2004-2771 and the direct command execution functionality CVE-2014-7844...

7.8CVSS7.5AI score0.06858EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2014/12/16 7:44 p.m.12 views

mailx: command execution flaw

A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters CVE-2004-2771 and the direct command execution functionality CVE-2014-7844...

7.8CVSS7.5AI score0.06858EPSS
SaveExploits1References4
Debian
Debian
added 2014/12/16 5:56 p.m.51 views

[SECURITY] [DSA 3105-1] heirloom-mailx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3105-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...

7.8CVSS8.5AI score0.06858EPSS
SaveExploits1
Debian
Debian
added 2014/12/16 5:56 p.m.44 views

[SECURITY] [DSA 3104-1] bsd-mailx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3104-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2014/12/16 12:00 a.m.33 views

Debian Security Advisory DSA 3104-1 (bsd-mailx - security update)

It was discovered that bsd-mailx, an implementation of the mail command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can re-enable it using the expandaddr in an appropriate mailrc file. This update also...

7.5CVSS0.2AI score0.06858EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2014/12/16 12:00 a.m.33 views

CVE-2014-7844

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address...

7.8CVSS7.2AI score0.0155EPSS
SaveExploits0References5
OSV
OSV
added 2014/12/16 12:00 a.m.6 views

UBUNTU-CVE-2014-7844

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address...

7.8CVSS7.4AI score0.0155EPSS
SaveExploits0References6
OSV
OSV
added 2014/12/16 12:00 a.m.35 views

DSA-3105-1 heirloom-mailx - security update

Bulletin has no description...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1
OSV
OSV
added 2014/12/16 12:00 a.m.34 views

DSA-3104-1 bsd-mailx - security update

Bulletin has no description...

7.8CVSS7.5AI score0.0155EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2014/12/16 12:00 a.m.32 views

Debian Security Advisory DSA 3105-1 (heirloom-mailx - security update)

Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the mail command: CVE-2004-2771 mailx interprets interprets shell meta-characters in certain email addresses. CVE-2014-7844 An unexpected feature of mailx treats syntactically valid email addresses as shell...

7.5CVSS0.3AI score0.06858EPSS
SaveExploits1References1
Oracle linux
Oracle linux
added 2014/12/16 12:00 a.m.47 views

mailx security update

12.4-8 - CVE-2004-2771 mailx: command execution flaw resolves: 1171175...

7.5CVSS1.9AI score0.06858EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2014/12/15 12:00 a.m.25 views

Debian: Security Advisory (DSA-3104-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.0155EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2014/12/15 12:00 a.m.29 views

Debian: Security Advisory (DSA-3105-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.06858EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2014/07/26 12:00 a.m.20 views

Oracle Solaris Critical Patch Update : jul2012_SRU7_5

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to...

4.4CVSS5.3AI score0.01986EPSS
SaveExploits0References4
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.14 views

BSD mailx 8.1.1 -10 Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1305/info Some Linux distributions ship with BSD mailx 8.1.1-10 On Slackware 7.x it can be found as /usr/bin/Mail. A vulnerability exists in the 'mail' program, part of the Berkeley mailx package. The 'mail' program...

7.1AI score
SaveExploits0
Rows per page
Query Builder