Medium ELSA-2014-1999 2 CVEs

Moderate: mailx security update (Oracle Linux 7)

Published Dec 16, 2014 · Updated Dec 16, 2014

Ecosystem: Oracle Linux

Summary

[12.4-8]
- CVE-2004-2771 mailx: command execution flaw
resolves: #1171175

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	mailx	0:12.5-12.el7_0

Vulnerabilities 2

Unscored —

CVE-2004-2771

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers…

bsd-mailx heirloom-mailx mailx Debian Ubuntu Azure Linux

Dec 24, 2014
Unscored —

CVE-2014-7844

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

BSD mailx bsd-mailx heirloom-mailx Debian Ubuntu

Jan 14, 2020