Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.
- http://securityreason.com/securityalert/522
- http://www.evuln.com/vulns/82/summary.html
No PoCs found on GitHub currently.