Total vulnerabilities in the database
Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.
| Software | From | Fixed in |
|---|---|---|
| sendmail / sendmail | 8.12.3 | 8.12.3.x |
| sendmail / sendmail | 8.12.4 | 8.12.4.x |
| sendmail / sendmail | 8.12.1 | 8.12.1.x |
| sendmail / sendmail | 8.12.5 | 8.12.5.x |
| sendmail / sendmail | 8.12.0 | 8.12.0.x |
| sendmail / sendmail | 8.12.6 | 8.12.6.x |
| sendmail / sendmail | 8.12.2 | 8.12.2.x |
| netbsd / netbsd | 1.5.3 | 1.5.3.x |
| netbsd / netbsd | 1.6 | 1.6.x |
| netbsd / netbsd | 1.5 | 1.5.x |
| netbsd / netbsd | 1.5.1 | 1.5.1.x |
| netbsd / netbsd | 1.5.2 | 1.5.2.x |