thedark
Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
 Posted: Thu Aug 04, 2005 12:13 am Post subject: Sendmail |
 |
|
A vulnerability was discovered by zen-parse and Pedram Amini in the sendmail MTA. They found two ways to exploit smrsh, an application intended as a replacement for the sh shell for use with sendmail; the first by inserting specially formatted commands in the ~/.forward file and secondly by calling smrsh directly with special options. These can be exploited to give users with no shell account, or those not permitted to execute certain programs or commands, the ability to bypass these restrictions.
http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2002-1165 |
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
