Unscored severity · published Dec 24, 2014
CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in…
–
CVSS
6.9%
EPSS
No
On KEV
Description
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BM
Bsd Mailx · Bsd Mailx Project
through 8.1.2 · source: NVD
EL
Enterprise Linux · Redhat
6.0; 7.0 · source: NVD
LI
Linux · Oracle
6; 7 · source: NVD
MA
Mailx · Heirloom
through 12.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2771
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2771
linux.oracle.com
http://linux.oracle.com/errata/ELSA-2014-1999.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-1999.html
seclists.org
http://seclists.org/oss-sec/2014/q4/1066
secunia.com
http://secunia.com/advisories/60940
secunia.com
http://secunia.com/advisories/61585
secunia.com
http://secunia.com/advisories/61693
More from Bsd Mailx
7.8
CVE-2014-7844
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address