Every CVE Search/ Get API key

CVE-2004-2771

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier...

7.5 HighFix available

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Exploit likelihood

6.86%Up 5.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
CVE-2004-2771
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
CVE-2004-2771
Updated
2026-11-02
EUVDEUVD-2004-2761 No score

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
EUVD-2004-2761
Updated
2026-11-03
GitHub AdvisoriesGHSA-3f68-9fxg-g2j6 No score

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier...

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
GHSA-3f68-9fxg-g2j6
Weakness
CWE-20
Updated
2026-11-02
OSVAZL-36961 No score

CVE-2004-2771 affecting package mailx for versions less than 12.5-36

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
AZL-36961
Updated
2026-11-02
OSVAZL-6676 No score

CVE-2004-2771 affecting package mailx for versions less than 12.5-34

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
AZL-6676
Updated
2026-11-02
Show 7 moreShow less
OSVAZL-7286 No score

CVE-2004-2771 affecting package mailx for versions less than 12.5-34

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
AZL-7286
Updated
2026-11-02
OSV No score

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
CVE-2004-2771
Updated
2026-11-02
OSVDEBIAN-CVE-2004-2771 No score

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
DEBIAN-CVE-2004-2771
Updated
2026-11-02
OSVMGASA-2014-0538 No score

Updated nail package fixes security vulnerabilities

Updated nail package fixes security vulnerabilities:

A flaw was found in the way mailx handled the parsing of email addresses. A syntactically valid email address could allow a local attacker to cause mailx to execute arbitrary shell commands through shell meta-characters and the direct command execution functionality (CVE-2004-2771, CVE-2014-7844).

Record
MGASA-2014-0538
Updated
2026-11-02
OSVopenSUSE-SU-2024:10561-1 No score

mailx-12.5-24.4 on GA media

These are all security issues fixed in the mailx-12.5-24.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10561-1
Updated
2026-11-02
OSVSUSE-RU-2015:0876-1 No score

Recommended update for mailx

This update for mailx enables IPv6 support and includes the following fixes:

* Crop off the brackets of an ipv6 address if found. (bnc#853246)
* Enable mailx to parse IPv6 addresses including a port ([ipv6]:port).
  (bnc#853246)
* Do not pseudo detect Latin nor UTF-8 in binary attachments.
  (bnc#827010)
Record
SUSE-RU-2015:0876-1
Updated
2026-11-02
OSVUBUNTU-CVE-2004-2771 No score

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

Record
UBUNTU-CVE-2004-2771
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mailx
Azure Linux:3
 before 12.5-36
12.5-36
mailx
Azure Linux:2
 before 12.5-34
12.5-34
bsd-mailx
Debian:12
 before 8.1.2-0.20071201cvs-1
8.1.2-0.20071201cvs-1
bsd-mailx
Debian:13
 before 8.1.2-0.20071201cvs-1
8.1.2-0.20071201cvs-1
bsd-mailx
Debian:14
 before 8.1.2-0.20071201cvs-1
8.1.2-0.20071201cvs-1
heirloom-mailx
Debian:6.0
 before 12.4-2+deb6u1, plus listed versions
12.4-2
12.4-2+deb6u1
heirloom-mailx
Debian:7
 before 12.5-2+deb7u1, plus listed versions
12.5-2
12.5-2+deb7u1
nail
Mageia:4
 before 12.4-9.1.mga4
12.4-9.1.mga4
mailx
Red Hat:enterprise_linux:6::client
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
mailx-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
Show 16 moreShow less
Affected packages
PackageAffectedFixed
mailx
Red Hat:enterprise_linux:6::computenode
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
mailx-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
mailx
Red Hat:enterprise_linux:6::server
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
mailx-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
mailx
Red Hat:enterprise_linux:6::workstation
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
mailx-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:12.4-8.el6_6
0:12.4-8.el6_6
mailx
Red Hat:enterprise_linux:7::client
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
mailx-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
mailx
Red Hat:enterprise_linux:7::computenode
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
mailx-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
mailx
Red Hat:enterprise_linux:7::server
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
mailx-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
mailx
Red Hat:enterprise_linux:7::workstation
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
mailx-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:12.5-12.el7_0
0:12.5-12.el7_0
heirloom-mailx
Ubuntu:14.04:LTS
 before 12.5-2+deb7u1build0.14.04.1, plus listed versions
12.5-2
12.5-2+deb7u1build0.14.04.1
mailx
openSUSE:Tumbleweed
 before 12.5-24.4
12.5-24.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-2771 is a high vulnerability (CVSS 7.5) in Bsd Mailx Project Mailx, published December 10, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.86%, the 94th percentile. Fixed in mailx 12.5-36.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open