Re: [cobalt-security] Cobalt Security Notice - Linux Kernel - 06/09/00

[Jeff Lovell <jlovell@xxxxxxxxxx>]

Theodore Jones wrote:
> 
> Jeff,
> 
> Is sendmail only vulnerable if the user with an email account has malicious
> intent?  Can anyone that knows an email address on the target machine just send
> a message and comprimise the system?  Also, how long is it estimated until the
> package patch comes out?

This exploit is only exploitable by malicious users
with shell access. It is not remotely exploitable.

Jeff