Lucene search
Veracode Vulnerability DatabaseVERACODE:11554HistoryJan 15, 2019 - 9:03 a.m.
Arbitrary Command Execution
2019-01-1509:03:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.027
Percentile
90.6%
mailx is vulnerable to arbitrary command execution. A remote attacker is able to execute arbitrary commands through the expand function in fio.c using shell metacharacters in a malicious email address.
References
linux.oracle.com/errata/ELSA-2014-1999.html
rhn.redhat.com/errata/RHSA-2014-1999.html
seclists.org/oss-sec/2014/q4/1066
secunia.com/advisories/60940
secunia.com/advisories/61585
secunia.com/advisories/61693
www.debian.org/security/2014/dsa-3105
access.redhat.com/errata/RHSA-2014:1999
access.redhat.com/security/cve/CVE-2004-2771
access.redhat.com/security/updates/classification/#moderate
bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748
bugzilla.redhat.com/show_bug.cgi?id=1162783
rhn.redhat.com/errata/RHSA-2014-1999.html
Related
cvelist
cvelist
CVE-2004-2771
2014-12-24 18:00:00
cbl_mariner
cbl_mariner
CVE-2004-2771 affecting package mailx for versions less than 12.5-36
2024-04-03 00:40:51
CVE-2004-2771 affecting package mailx for versions less than 12.5-34
2022-04-09 15:40:01
CVE-2004-2771 affecting package mailx for versions less than 12.5-34
2022-04-09 15:40:01
ubuntucve
ubuntucve
CVE-2004-2771
2014-12-24 00:00:00
osv
osv
bsd-mailx - security update
2014-12-17 00:00:00
bsd-mailx - security update
2014-12-16 00:00:00
heirloom-mailx - security update
2014-12-16 00:00:00
debiancve
debiancve
CVE-2004-2771
2014-12-24 18:59:00
nessus
nessus
OracleVM 3.3 : mailx (OVMSA-2014-0086)
2014-12-29 00:00:00
CBL Mariner 2.0 Security Update: mailx (CVE-2004-2771)
2024-07-03 00:00:00
GLSA-201804-06 : mailx: Multiple vulnerabilities
2018-04-10 00:00:00
cve
cve
CVE-2004-2771
2014-12-24 18:59:00
nvd
nvd
CVE-2004-2771
2014-12-24 18:59:00
slackware
slackware
[slackware-security] mailx
2016-03-03 06:56:13
gentoo
gentoo
mailx: Multiple vulnerabilities
2018-04-08 00:00:00
debian
debian
[SECURITY] [DSA 3105-1] heirloom-mailx security update
2014-12-16 17:56:35
[SECURITY] [DLA 114-1] heirloom-mailx security update
2014-12-17 16:35:33
[SECURITY] [DSA 3104-1] bsd-mailx security update
2014-12-16 17:56:05
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0538)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3104-1)
2014-12-15 00:00:00
Fedora Update for mailx FEDORA-2014-17277
2015-01-05 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3104-1] bsd-mailx security update
2014-12-22 00:00:00
[SECURITY] [DSA 3105-1] heirloom-mailx security update
2014-12-22 00:00:00
Different mailx versions security vulnerabilities
2014-12-22 00:00:00
centos
centos
mailx security update
2014-12-16 20:39:59
fedora
fedora
[SECURITY] Fedora 20 Update: mailx-12.5-11.fc20
2015-01-03 19:11:05
[SECURITY] Fedora 21 Update: mailx-12.5-14.fc21
2015-01-03 19:09:28
[SECURITY] Fedora 19 Update: mailx-12.5-9.fc19
2015-01-03 19:03:14
oraclelinux
oraclelinux
mailx security update
2014-12-16 00:00:00
redhat
redhat
(RHSA-2014:1999) Moderate: mailx security update
2014-12-16 00:00:00
f5
f5
K16945 : Mailx vulnerabilities CVE-2004-2771 and CVE-2014-7844
2015-07-10 00:00:00
SOL16945 - Mailx vulnerabilities CVE-2004-2771 and CVE-2014-7844
2015-07-10 00:00:00
mageia
mageia
Updated nail package fixes security vulnerabilities
2014-12-19 18:06:35
amazon
amazon
Medium: mailx
2015-01-08 11:37:00