This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2004-2771 →
DEBIAN-CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands...
Original description
The description as published by the source.
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
bsd-mailx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2-0.20071201cvs-1"}]}]
Debian:13
bsd-mailx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2-0.20071201cvs-1"}]}]
Debian:14
bsd-mailx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2-0.20071201cvs-1"}]}]
References
- advisory security-tracker.debian.org