NVD

Id
80154  
Name
CVE-2002-1165  
Description
Sendmail Consortium"s Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-10-11  
Modified Date
2016-10-17  
Seq
2002-1165  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399557 80154 CVE-2002-1165 NetBSD-SA2002-023  View
399558 80154 CVE-2002-1165 CLA-2002:532  View
399559 80154 CVE-2002-1165 20021001 iDEFENSE Security Advisory 10.01.02: Sendmail smrsh bypass vulnerabilities  View
399560 80154 CVE-2002-1165 sendmail-forward-bypass-smrsh(10232)  View
399561 80154 CVE-2002-1165 MDKSA-2002:083  View
399562 80154 CVE-2002-1165 RHSA-2003:073  View
399563 80154 CVE-2002-1165 5845  View
399564 80154 CVE-2002-1165 http://www.sendmail.org/smrsh.adv.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63905 JVNDB-2002-000232 Sendmail の smrsh におけるセキュリティチェックを回避される脆弱性 sendmail には、.forward ファイル内に特定の文字を利用したエイリアスを指定することにより、smrsh (The Sendmail Consortium"s Restricted Shell) によるチェックを回避されてしまう脆弱性が存在します。 CVE-2002-1165 5549 CVE-2002-1165 80154 4.6 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000232.html 2002-10-01 2007-04-01 View