CVE-2002-1165: Medium severity sendmail sendmail vulnerability
Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1165?
CVE-2002-1165 has been classified as a high-severity vulnerability due to the ease of exploitation and potential impact on system integrity.
How do I fix CVE-2002-1165?
To mitigate CVE-2002-1165, upgrade Sendmail to a version that is not affected by this vulnerability, specifically 8.12.7 or later.
What systems are affected by CVE-2002-1165?
CVE-2002-1165 affects Sendmail versions 8.12.6, 8.11.6-15, and possibly older versions dating back to 5/19/1998.
What are the risks associated with CVE-2002-1165?
Exploitation of CVE-2002-1165 allows attackers to bypass command restrictions, which could lead to unauthorized command execution.
Is CVE-2002-1165 still relevant today?
While CVE-2002-1165 is an older vulnerability, systems running affected versions of Sendmail remain at risk if not properly updated.