Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2002-1165
HistoryOct 11, 2002 - 4:00 a.m.

CVE-2002-1165

2002-10-1104:00:00
[email protected]
web.nvd.nist.gov
5

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

48.9%

JSON

Sendmail Consortium’s Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) “||” sequences or (2) “/” characters, which are not properly filtered or verified.

Affected configurations

Nvd
Node
sendmailsendmailMatch8.12.0
OR
sendmailsendmailMatch8.12.1
OR
sendmailsendmailMatch8.12.2
OR
sendmailsendmailMatch8.12.3
OR
sendmailsendmailMatch8.12.4
OR
sendmailsendmailMatch8.12.5
OR
sendmailsendmailMatch8.12.6
Node
netbsdnetbsdMatch1.5
OR
netbsdnetbsdMatch1.5.1
OR
netbsdnetbsdMatch1.5.2
OR
netbsdnetbsdMatch1.5.3
OR
netbsdnetbsdMatch1.6
VendorProductVersionCPE
sendmailsendmail8.12.0cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*
sendmailsendmail8.12.1cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*
sendmailsendmail8.12.2cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*
sendmailsendmail8.12.3cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*
sendmailsendmail8.12.4cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*
sendmailsendmail8.12.5cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*
sendmailsendmail8.12.6cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*
netbsdnetbsd1.5cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*
netbsdnetbsd1.5.1cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*
netbsdnetbsd1.5.2cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

Related

nessus 3
ubuntucve 1
cvelist 1
packetstorm 1
redhat 1
cve 1
debiancve 1
securityvulns 1
exploitdb 1
openvas 1
cert 1
nessus
nessus
Mandrake Linux Security Advisory : sendmail (MDKSA-2002:083)
2004-07-31 00:00:00
RHEL 2.1 : sendmail (RHSA-2002:259)
2004-07-06 00:00:00
Sendmail 8.8.8 - 8.12.7 Multiple Vulnerabilities (Bypass, OF)
2003-03-05 00:00:00
ubuntucve
ubuntucve
CVE-2002-1165
2002-10-11 00:00:00
cvelist
cvelist
CVE-2002-1165
2002-10-03 04:00:00
packetstorm
packetstorm
idefense.smrsh.txt
2002-10-02 00:00:00
redhat
redhat
(RHSA-2002:259) sendmail security update
2003-02-06 00:00:00
cve
cve
CVE-2002-1165
2002-10-11 04:00:00
debiancve
debiancve
CVE-2002-1165
2002-10-11 04:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 10.01.02: Sendmail smrsh bypass vulnerabilities
2002-10-02 00:00:00
exploitdb
exploitdb
Sendmail 8.12.x - SMRSH Double Pipe Access Validation
2002-10-01 00:00:00
openvas
openvas
Sendmail 8.8.8 - 8.12.7 Double Pipe Access Validation Vulnerability
2005-11-03 00:00:00
cert
cert
Sendmail vulnerable to buffer overflow when DNS map is specified using TXT records
2002-06-28 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

48.9%

JSON
Related for NVD:CVE-2002-1165
nessus3ubuntucve1cvelist1packetstorm1redhat1cve1debiancve1securityvulns1exploitdb1openvas1cert1