CVE-2002-1165

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass…

published October 3, 2002

CVSS
—
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01099 · 65.2th percentile
Published
2002-10-03T04:00Z
EPSS history
Timeline
  • 03 OCT 04:00Z
    Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass…
    cvelistv5