Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:11554
HistoryJan 15, 2019 - 9:03 a.m.

Arbitrary Command Execution

2019-01-1509:03:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

mailx is vulnerable to arbitrary command execution. A remote attacker is able to execute arbitrary commands through the expand function in fio.c using shell metacharacters in a malicious email address.

Related

cvelist 1
nessus 19
osv 4
cve 1
ubuntucve 1
cbl_mariner 3
debiancve 1
securityvulns 3
debian 4
centos 1
openvas 15
slackware 1
gentoo 1
f5 2
fedora 3
amazon 1
mageia 1
redhat 1
oraclelinux 1
cvelist
cvelist
CVE-2004-2771
2014-12-24 18:00:00
nessus
nessus
OracleVM 3.3 : mailx (OVMSA-2014-0086)
2014-12-29 00:00:00
GLSA-201804-06 : mailx: Multiple vulnerabilities
2018-04-10 00:00:00
Fedora 21 : mailx-12.5-14.fc21 (2014-17243)
2015-01-05 00:00:00
osv
osv
bsd-mailx - security update
2014-12-16 00:00:00
bsd-mailx - security update
2014-12-17 00:00:00
heirloom-mailx - security update
2014-12-16 00:00:00
cve
cve
CVE-2004-2771
2014-12-24 18:59:00
ubuntucve
ubuntucve
CVE-2004-2771
2014-12-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2004-2771 affecting package mailx for versions less than 12.5-34
2022-04-09 15:40:01
CVE-2004-2771 affecting package mailx for versions less than 12.5-34
2022-04-09 15:40:01
CVE-2004-2771 affecting package mailx for versions less than 12.5-36
2024-04-03 00:40:51
debiancve
debiancve
CVE-2004-2771
2014-12-24 18:59:00
securityvulns
securityvulns
[SECURITY] [DSA 3104-1] bsd-mailx security update
2014-12-22 00:00:00
Different mailx versions security vulnerabilities
2014-12-22 00:00:00
[SECURITY] [DSA 3105-1] heirloom-mailx security update
2014-12-22 00:00:00
debian
debian
[SECURITY] [DSA 3105-1] heirloom-mailx security update
2014-12-16 17:56:53
[SECURITY] [DLA 114-1] heirloom-mailx security update
2014-12-17 16:35:55
[SECURITY] [DLA 113-1] bsd-mailx security update
2014-12-17 16:09:32
centos
centos
mailx security update
2014-12-16 20:39:59
openvas
openvas
Debian: Security Advisory (DSA-3104-1)
2014-12-15 00:00:00
Fedora Update for mailx FEDORA-2014-17277
2015-01-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0538)
2022-01-28 00:00:00
slackware
slackware
[slackware-security] mailx
2016-03-03 06:56:13
gentoo
gentoo
mailx: Multiple vulnerabilities
2018-04-08 00:00:00
f5
f5
SOL16945 - Mailx vulnerabilities CVE-2004-2771 and CVE-2014-7844
2015-07-10 00:00:00
K16945 : Mailx vulnerabilities CVE-2004-2771 and CVE-2014-7844
2015-07-10 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: mailx-12.5-9.fc19
2015-01-03 19:03:14
[SECURITY] Fedora 21 Update: mailx-12.5-14.fc21
2015-01-03 19:09:28
[SECURITY] Fedora 20 Update: mailx-12.5-11.fc20
2015-01-03 19:11:05
amazon
amazon
Medium: mailx
2015-01-08 11:37:00
mageia
mageia
Updated nail package fixes security vulnerabilities
2014-12-19 18:06:35
redhat
redhat
(RHSA-2014:1999) Moderate: mailx security update
2014-12-16 00:00:00
oraclelinux
oraclelinux
mailx security update
2014-12-16 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:11554
cvelist1nessus19osv4cve1ubuntucve1cbl_mariner3debiancve1securityvulns3debian4centos1openvas15slackware1gentoo1f52fedora3amazon1mageia1redhat1oraclelinux1