CVE ID:	CVE-2004-2771
Description:	The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Test IDs:	1.3.6.1.4.1.25623.1.0.703105   1.3.6.1.4.1.25623.1.0.123220   1.3.6.1.4.1.25623.1.1.1.2.2014.114   1.3.6.1.4.1.25623.1.1.4.2014.1696.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2771 60940 http://secunia.com/advisories/60940 61585 http://secunia.com/advisories/61585 61693 http://secunia.com/advisories/61693 DSA-3105 http://www.debian.org/security/2014/dsa-3105 RHSA-2014:1999 http://rhn.redhat.com/errata/RHSA-2014-1999.html [oss-security] 20141216 mailx issues (CVE-2004-2771, CVE-2014-7844) http://seclists.org/oss-sec/2014/q4/1066 http://linux.oracle.com/errata/ELSA-2014-1999.html http://linux.oracle.com/errata/ELSA-2014-1999.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748