On Wed, 30 Aug 2006, Jason L Tibbitts III wrote:
The current security audit says:
CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable
The CVE says:
Official Statement from Red Hat (8/30/2006)
This flaw causes a crash but does not result in a denial of service
against Sendmail and is therefore not a security issue.
Causing a crash from remotely is NOT a security issue? Someone explain
that to me, please...
*******************************************************************************
Gilbert Sebenste ********
(My opinions only!) ******
*******************************************************************************