CVE

Id
5549  
CVE No.
CVE-2002-1165  
Status
Candidate  
Description
Sendmail Consortium"s Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.  
Phase
Modified (20080207)  
Votes
ACCEPT(3) Armstrong, Cole, Green | MODIFY(1) Cox  
Comments
Cox> Addref: RHSA-2002:259  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30219 5549 CVE-2002-1165 BUGTRAQ:20021001 iDEFENSE Security Advisory 10.01.02: Sendmail smrsh bypass vulnerabilities  View
30220 5549 CVE-2002-1165 URL:http://marc.info/?l=bugtraq&m=103350914307274&w=2  View
30221 5549 CVE-2002-1165 CONFIRM:http://www.sendmail.org/smrsh.adv.txt  View
30222 5549 CVE-2002-1165 MANDRIVA:MDKSA-2002:083  View
30223 5549 CVE-2002-1165 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2002:083  View
30224 5549 CVE-2002-1165 NETBSD:NetBSD-SA2002-023  View
30225 5549 CVE-2002-1165 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc  View
30226 5549 CVE-2002-1165 CONECTIVA:CLA-2002:532  View
30227 5549 CVE-2002-1165 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532  View
30228 5549 CVE-2002-1165 FREEBSD:FreeBSD-SA-02:41  View
30229 5549 CVE-2002-1165 CALDERA:CSSA-2002-052.0  View
30230 5549 CVE-2002-1165 SGI:20030101-01-P  View
30231 5549 CVE-2002-1165 REDHAT:RHSA-2003:073  View
30232 5549 CVE-2002-1165 URL:http://www.redhat.com/support/errata/RHSA-2003-073.html  View
30233 5549 CVE-2002-1165 SECUNIA:7826  View
30234 5549 CVE-2002-1165 URL:http://secunia.com/advisories/7826  View
30235 5549 CVE-2002-1165 XF:sendmail-forward-bypass-smrsh(10232)  View
30236 5549 CVE-2002-1165 URL:http://www.iss.net/security_center/static/10232.php  View
30237 5549 CVE-2002-1165 BID:5845  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63905 JVNDB-2002-000232 Sendmail の smrsh におけるセキュリティチェックを回避される脆弱性 sendmail には、.forward ファイル内に特定の文字を利用したエイリアスを指定することにより、smrsh (The Sendmail Consortium"s Restricted Shell) によるチェックを回避されてしまう脆弱性が存在します。 CVE-2002-1165 5549 4.6 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000232.html  View