CVE:CVE-2014-7844
CNNVD:CNNVD-201412-378
BSD mailx是美国debian开源的一个软件包。
BSD mailx 8.1.2版本及之前版本存在注入漏洞。本地攻击者利用该漏洞通过特制的电子邮件地址执行任意命令。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,7.3,7.4,7.6,7.7,and avoid the version 6.6,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.6,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 6.6,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.6,7.3,7.6,7.7,and avoid the version 6.6,7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade bsd_mailx_project bsd_mailx to a higher version than 8.1.2,and avoid the version 8.1.2