VYPR
Unrated severityNVD Advisory· Published Dec 24, 2014· Updated May 6, 2026

CVE-2004-2771

CVE-2004-2771

Description

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Affected products

6
  • cpe:2.3:a:bsd_mailx_project:bsd_mailx:*:*:*:*:*:*:*:*
    Range: <=8.1.2
  • cpe:2.3:a:heirloom:mailx:*:*:*:*:*:*:*:*
    Range: <=12.5
  • cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
    • cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.