On Wed, 2006-08-30 at 11:24 -0500, Gilbert Sebenste wrote:
>
> CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable
>
> The CVE says:
>
> Official Statement from Red Hat (8/30/2006)
> This flaw causes a crash but does not result in a denial of service
> against Sendmail and is therefore not a security issue.
Causing a crash from remotely is NOT a security issue? Someone explain
that to me, please...
I think this means a crash of a child sendmail process handling the
connection that causes the crash. That shouldn't affect anything else.
--
Les Mikesell
lesmikesell(a)gmail.com