PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass

milw0rm.com 2004-08-08...

Low: Red Hat Security Advisory: sendmail security update

The sendmail packages shipped with Red Hat Linux Advanced Server have a security bug if sendmail is configured to use smrsh. This security errata release fixes the problem. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 SMRSH the SendMail Restricted SHell is a /bin/sh...

CVE-2002-1978

IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command...

DEBIAN-CVE-2002-1165

Sendmail Consortium's Restricted Shell SMRSH in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after 1 "||" sequences or 2 "/" characters, which are not properly...