Re: Sendmail bug to flaw: should I file another bug report?

• To: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• Subject: Re: Sendmail bug to flaw: should I file another bug report?
• From: Jason L Tibbitts III <tibbs@xxxxxxxxxxx>
• Date: Wed, 30 Aug 2006 10:51:56 -0500
• In-reply-to: <Pine.LNX.4.64.0608301046430.7827@xxxxxxxxxxxxxxxxxxxxxx> (Gilbert Sebenste's message of "Wed, 30 Aug 2006 10:46:54 -0500 (CDT)")
• References: <Pine.LNX.4.64.0608301046430.7827@xxxxxxxxxxxxxxxxxxxxxx>
• Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• User-agent: Gnus/5.1006 (Gnus v5.10.6) XEmacs/21.4 (Jumbo Shrimp, linux)

>>>>> "GS" == Gilbert Sebenste <sebenste@xxxxxxxxxxxxxxxxxxxxxx> writes:

GS> Someone filed a bug which tells of Sendmail 8.13.8 being released,
GS> which fixed a bug in 8.13.7.

The current security audit says:

CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable

The CVE says:

Official Statement from Red Hat (8/30/2006)
This flaw causes a crash but does not result in a denial of service
against Sendmail and is therefore not a security issue.

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4434

 - J<

• Follow-Ups:
  • Re: Sendmail bug to flaw: should I file another bug report?
    • From: Gilbert Sebenste

• References:
  • Sendmail bug to flaw: should I file another bug report?
    • From: Gilbert Sebenste

• Prev by Date: removing ssh access in an emergency
• Next by Date: Re: What is the language "British"?
• Previous by thread: Sendmail bug to flaw: should I file another bug report?
• Next by thread: Re: Sendmail bug to flaw: should I file another bug report?
• Index(es):
  • Date
  • Thread