Vulnerability
CVE-2002-1165
MEDIUM 4.6
public exploit
CVE-2002-1165 is a medium-severity vulnerability (CVSS v2 4.6). As of 2026-10-11, 5 hosts in our data show software it affects on an open service in 5 countries.
Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.
- Published
- 2002-10-11
- Last modified
- 2026-06-16
- CVSS score
- 4.6 CVSS v2
- CVSS vector (v2)
- AV:L/AC:L/Au:N/C:P/I:P/A:P
- Exploit likelihood (EPSS)
- 1.1% in the next 30 days (top 36% of CVEs)
Exposure in our data
5 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Counted 2026-10-11 04:20 UTC
By country
| India IN | 1 |
| Japan JP | 1 |
| Russia RU | 1 |
| Thailand TH | 1 |
| United States US | 1 |
Affected software seen
| sendmail 8.12.5 | 4 |
| sendmail 8.12.2 | 1 |