CVE-2002-1165

MEDIUM 4.6CVE-2002-1165 · Published 11/10/2002 · updated 16/06/2026

In short

CVE-2002-1165 is a MEDIUM (CVSS 4.6) vulnerability affecting sendmail (sendmail).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sendmail sendmail	`= 8.12.0= 8.12.1= 8.12.2= 8.12.3= 8.12.4= 8.12.5= 8.12.6`	No fix yet

Description

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.

References

More vulnerabilities in sendmail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sendmail

= 8.12.0= 8.12.1= 8.12.2= 8.12.3= 8.12.4= 8.12.5= 8.12.6

No fix yet

Description

More vulnerabilities in sendmail

See all →