CVE-2014-7844

Description

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.025

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in OS X Yosemite 10.10.5 Update	Mac
Multiple vulnerabilities are fixed in OS X Yosemite 10.10.5 Combo Update	Mac
simple mail user agent (USN-2455-1) bsd-mailx_8.1.2-0.20111106cvs-1ubuntu0.1_i386.deb	Linux
simple mail user agent (USN-2455-1) bsd-mailx_8.1.2-0.20111106cvs-1ubuntu0.1_amd64.deb	Linux
simple mail user agent (USN-2455-1) bsd-mailx_8.1.2-0.20131005cvs-1ubuntu0.14.04.1_i386.deb	Linux
simple mail user agent (USN-2455-1) bsd-mailx_8.1.2-0.20131005cvs-1ubuntu0.14.04.1_amd64.deb	Linux
bsd-mailx security update(DSA-3104-1) bsd-mailx_8.1.2-0.20111106cvs-1+deb7u1_i386.deb	Linux
heirloom-mailx security update(DSA-3105-1) heirloom-mailx_12.5-2+deb7u1_i386.deb	Linux
Mailx security update (CESA-2014:1999) mailx-12.4-8.el6_6.i686.rpm	Linux
Mailx security update (CESA-2014:1999) mailx-12.4-8.el6_6.x86_64.rpm	Linux
(RHSA-2014:1999) Moderate: mailx security update mailx-12.4-8.el6_6.i686.rpm	Linux
(RHSA-2014:1999) Moderate: mailx security update mailx-12.4-8.el6_6.x86_64.rpm	Linux
(RHSA-2014:1999) Moderate: mailx security update mailx-12.5-12.el7_0.x86_64.rpm	Linux
(RHSA-2014:1999)Moderate: security update mailx-debuginfo-12.5-12.el7_0.x86_64.rpm	Linux
Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability (CVE-2014-7844)	NCM

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-600354	OS X Yosemite 10.10.5 Update
PATCH-600458	OS X Yosemite 10.10.5 Combo Update