CVE details
Affected ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| mail/heirloom-mailx | heirloom-mailx | 12.4_11 | unaddressed | cy@FreeBSD.org |
Template for a VuXML entry
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>heirloom-mailx</name>
<range><lt>FIXME</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>The expand function in fio.c in Heirloom mailx 12.5 and earlier and
BSD mailx 8.1.2 and earlier allows remote attackers to execute
arbitrary commands via shell metacharacters in an email address.</p>
</body>
</description>
<references>
<cvename>CVE-2004-2771</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2004-2771</url>
</references>
<dates>
<discovery>2014-12-24</discovery>
<entry>2026-10-25</entry>
</dates>
</vuln>