01 Record

CVE-2002-1165

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.10% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 63.3% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2002-10-03 04:00Z23 YR AGO
Last updated: 2024-08-08 03:19Z2 YR AGO
Reserved: 2002-09-27
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: 403366119f9ac66037eaf020f6ea934d06572e59cb10409aa688e933fd4c57f4

05 Affected products

VendorProductVersionsPlatforms

netbsdnetbsdNot specified—

redhatenterprise_linuxNot specified—

redhatlinuxNot specified—

sendmailsendmailNot specified—

06 References

www.redhat.comRHSA-2003:073http://www.redhat.com/support/errata/RHSA-2003-073.htmlvendor-advisoryx_refsource_REDHAT
distro.conectiva.com.brCLA-2002:532http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532vendor-advisoryx_refsource_CONECTIVA
ftp.netbsd.orgNetBSD-SA2002-023ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.ascvendor-advisoryx_refsource_NETBSD
marc.info20021001 iDEFENSE Security Advisory 10.01.02: Sendmail smrsh bypass vulnerabilitieshttp://marc.info/?l=bugtraq&m=103350914307274&w=2mailing-listx_refsource_BUGTRAQ
www.iss.netsendmail-forward-bypass-smrsh(10232)http://www.iss.net/security_center/static/10232.phpvdb-entryx_refsource_XF
www.mandriva.comMDKSA-2002:083http://www.mandriva.com/security/advisories?name=MDKSA-2002:083vendor-advisoryx_refsource_MANDRIVA
www.sendmail.orghttp://www.sendmail.org/smrsh.adv.txtx_refsource_CONFIRM
www.securityfocus.com5845http://www.securityfocus.com/bid/5845vdb-entryx_refsource_BID
secunia.com7826http://secunia.com/advisories/7826third-party-advisoryx_refsource_SECUNIA

01 Record index

CVE-2002-1165

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2002-1165

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References