CVE-2004-2771

HighCVSS 7.5/10Last modified Sep 23, 2026

Description

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Dec 24, 2014
Last modified
Sep 23, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-27769.8go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchCVE-2004-277710.0GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrCVE-2004-27787.1Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read orCVE-2004-27797.5id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggeri