Red Hat Security AdvisoryRHSA-2014:1999
mailx security update
Released 2014-12-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) mailx-12.5-12.el7_0
- Red Hat Enterprise Linux ComputeNode (v. 7) mailx-12.5-12.el7_0
- Red Hat Enterprise Linux Desktop (v. 6) mailx-12.4-8.el6_6
- Red Hat Enterprise Linux HPC Node (v. 6) mailx-12.4-8.el6_6
- Red Hat Enterprise Linux Server (v. 6) mailx-12.4-8.el6_6
- Red Hat Enterprise Linux Server (v. 7) mailx-12.5-12.el7_0
- Red Hat Enterprise Linux Workstation (v. 6) mailx-12.4-8.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) mailx-12.5-12.el7_0
Fixes 2 records
Priority MEDIUM 43
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06858 · Published 2014-12-24 · Partial fix CWE-20
Priority LOW 37
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0155 · Published 2020-01-14 · Partial fix CWE-74
