CVE:CVE-2004-2771
CNNVD:CNNVD-201412-376
BSD mailx是美国debian开源的一个软件包。
Heirloom mailx 12.5版本及之前版本、BSD mailx 8.1.2版本及之前版本存在输入验证错误漏洞。远程攻击者利用该漏洞通过电子邮件地址中的shell元字符执行任意代码。
solution:Upgrade oracle linux to a higher version than 6,7,and avoid the version 6,7; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade bsd_mailx_project bsd_mailx to a higher version than 8.1.2,and avoid the version (,8.1.2]; Upgrade heirloom mailx to a higher version than 12.5,and avoid the version (,12.5]