CVE-2004-2771: Input Validation
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2771?
CVE-2004-2771 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2004-2771?
To fix CVE-2004-2771, upgrade Heirloom mailx to version 12.5.1 or later, or update BSD mailx to version 8.1.3 or later.
What types of systems are affected by CVE-2004-2771?
CVE-2004-2771 affects Heirloom mailx versions 12.5 and earlier, and BSD mailx versions 8.1.2 and earlier, along with specific versions of Oracle and Red Hat Linux.
What is the exploit method for CVE-2004-2771?
CVE-2004-2771 can be exploited by injecting shell metacharacters into an email address, allowing remote attackers to execute arbitrary commands.
Is CVE-2004-2771 still a relevant vulnerability today?
While CVE-2004-2771 is an older vulnerability, it remains relevant for systems still running affected versions of mailx software.