Re: Subtle qmail bug? (was Re: Handling an MX record of 0.0.0.0 or 127.0.0.1)

[Peter van Dijk]

On Thu, Jan 25, 2001 at 12:40:47PM -0500, Patrick Bihan-Faou wrote:
> 
> 
> Well I guess that this one is definitely elligible for the "qmail security
> challenge".
> 
> http://web.infoave.net/~dsill/qmail-challenge.html
> 
> If you don't count that as a bug in qmail, then I don't know what is a
> bug...
> 

It's a bug. However, it would not qualify:

 8. The following types of bugs are specifically disqualified:
      + Exploits that involve corrupting DNS data, breaking TCP/IP, breaking
        NFS, or denying service (except for the case above).

Also, http://cr.yp.to/qmail/guarantee.html specifically mentions that
DoS is not part of the deal.

Greetz, Peter.