Sendmail restricted shell (smrsh) protection bypass

Unescaped shell characters allows to execute commands...

Restricted shell bypass

It's possible to et normall shell access...