Loading vulnerability details…
CVSS v3.1
N/A
EPSS
6.86%
Published
Dec 24, 2014
Modified
May 6, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Weaknesses (CWE)
Affected Products (6)
References (16)