CVE-2004-2771

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://linux.oracle.com/errata/ELSA-2014-1999.html
http://rhn.redhat.com/errata/RHSA-2014-1999.html
http://seclists.org/oss-sec/2014/q4/1066
http://secunia.com/advisories/60940
http://secunia.com/advisories/61585
http://secunia.com/advisories/61693
http://www.debian.org/security/2014/dsa-3105
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748 Exploit
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:bsd_mailx_project:bsd_mailx:*:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:heirloom:mailx:*:*:*:*:*:*:*:*
History

13 Feb 2023, 01:15

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2014:1999', 'name': 'https://access.redhat.com/errata/RHSA-2014:1999', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2004-2771', 'name': 'https://access.redhat.com/security/cve/CVE-2004-2771', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1162783', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1162783', 'tags': [], 'refsource': 'MISC'}
Summary A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters (CVE-2004-2771) and the direct command execution functionality (CVE-2014-7844). The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

02 Feb 2023, 16:15

Type Values Removed Values Added
Summary The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address. A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters (CVE-2004-2771) and the direct command execution functionality (CVE-2014-7844).
References
  • (MISC) https://access.redhat.com/errata/RHSA-2014:1999 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2004-2771 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1162783 -
Information

Published : 2014-12-24 18:59

Updated : 2023-12-10 11:31

NVD link : CVE-2004-2771

Mitre link : CVE-2004-2771

CVE.ORG link : CVE-2004-2771

JSON object : View

Products Affected

bsd_mailx_project

  • bsd_mailx

oracle

  • linux

redhat

  • enterprise_linux

heirloom

  • mailx
CWE
CWE-20

Improper Input Validation