CVE-2002-1165

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532
• http://marc.info/?l=bugtraq&m=103350914307274&w=2
• http://secunia.com/advisories/7826
• http://www.iss.net/security_center/static/10232.phpVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2002:083
• http://www.redhat.com/support/errata/RHSA-2003-073.html
• http://www.securityfocus.com/bid/5845Exploit, Patch, Vendor Advisory
• http://www.sendmail.org/smrsh.adv.txtExploit, Patch, Vendor Advisory
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532
• http://marc.info/?l=bugtraq&m=103350914307274&w=2
• http://secunia.com/advisories/7826
• http://www.iss.net/security_center/static/10232.phpVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2002:083
• http://www.redhat.com/support/errata/RHSA-2003-073.html
• http://www.securityfocus.com/bid/5845Exploit, Patch, Vendor Advisory
• http://www.sendmail.org/smrsh.adv.txtExploit, Patch, Vendor Advisory

Published

Oct 11, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1156Apache 2.0.42 allows remote attackers to view the source cod…
• CVE-2002-1157Cross-site scripting vulnerability in the mod_ssl Apache mod…
• CVE-2002-1158Buffer overflow in the irw_through function for Canna 3.5b2 …
• CVE-2002-1159Canna 3.6 and earlier does not properly validate requests, w…
• CVE-2002-1160The default configuration of the pam_xauth module forwards M…
• CVE-2002-1161Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2002-1166Buffer overflow in John Franks WN Server 1.18.2 through 2.0.…
• CVE-2002-1167Cross-site scripting (XSS) vulnerability in IBM Web Traffic …
• CVE-2002-1168Cross-site scripting (XSS) vulnerability in IBM Web Traffic …
• CVE-2002-1169IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x bef…
• CVE-2002-1170The handle_var_requests function in snmp_agent.c for the SNM…
• CVE-2002-1174Buffer overflows in Fetchmail 6.0.0 and earlier allow remote…