tags:

views:

24

answers:

0
Q: 

Dangerous sendmail behavior!?

What's going on here??

sendmail cat/etc/passwd
sendmail cat\etc\passwd
sendmail xxxcat/etc/passwd

Why in the world does this actually execute the cat command? This works at least on Fedora Core 4 O/S (yes, it's old, but still...) with Postfix.

Is this a known (and fixed) bug?

related questions

How can I delay mail delivery through an SMTP relay, possibly sendmail
php mail using sendmail.exe
What's the difference between sendmail via CGI vs. Perl?
see "sent mail" with sendmail
What's the best way to send emails from an asp.net page?
Sendmail for Windows
How do i create an email contact form for my website
programmatically sending out emails from a linux server
How can I send local Email by using exchange with asp.net?
How do I send mail to my google apps mail server from the webserver with the same name (using sendmail)?
Sendmail runs a smtp server(daemon) in the background?
Domain Keys, DKIM and Sendmail
mail function
Sendmail milter domainkeys
DomainKeys Sendmail DNS
How do I send up debian sendmail to use google Apps smtp to by pass ISP blocking smtp
ssh tunnel for sendmail
Can I use Google Apps for domain Email and still use a "sendmail" server to send emails?
sendmail and MX records when mail server is not on web host
Does your email client let you add custom headers programmatically?
How do I get sendmail to work reliably on a Mac OS 10.5?
How can I set triggers for sendmail?
What's a simple method to dump pipe input to a file? (Linux)
Sending mail via sendmail from python
Configuring sendmail behind a firewall