CVE-2006-4434

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

4.54% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 91.2% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2006-08-29 00:00Z20 YR AGO

Last updated

2024-08-07 19:06Z2 YR AGO

Reserved

2006-08-28

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-416Use After FreeVariant

Data version

5.1

Document digest

bd7c93b1c2cb7b42af4986440189187f284a8bac34faa8f8397bba776956d21e

• www.openbsd.org[3.9] 20060825 005: SECURITY FIX: August 25, 2006http://www.openbsd.org/errata.html#sendmail3vendor-advisoryx_refsource_OPENBSD
• www.attrition.org20060829 Sendmail vendor dispute - CVE-2006-4434 (fwd)http://www.attrition.org/pipermail/vim/2006-August/000999.htmlmailing-listx_refsource_VIM
• securitytracker.com1016753http://securitytracker.com/id?1016753vdb-entryx_refsource_SECTRACK
• secunia.com21637http://secunia.com/advisories/21637third-party-advisoryx_refsource_SECUNIA
• www.vupen.comADV-2006-3994http://www.vupen.com/english/advisories/2006/3994vdb-entryx_refsource_VUPEN
• www.osvdb.org28193http://www.osvdb.org/28193vdb-entryx_refsource_OSVDB
• secunia.com21749http://secunia.com/advisories/21749third-party-advisoryx_refsource_SECUNIA
• secunia.com21700http://secunia.com/advisories/21700third-party-advisoryx_refsource_SECUNIA
• www.debian.orgDSA-1164http://www.debian.org/security/2006/dsa-1164vendor-advisoryx_refsource_DEBIAN
• secunia.com21641http://secunia.com/advisories/21641third-party-advisoryx_refsource_SECUNIA
• www.sendmail.orghttp://www.sendmail.org/releases/8.13.8.htmlx_refsource_CONFIRM
• www.vupen.comADV-2006-3393http://www.vupen.com/english/advisories/2006/3393vdb-entryx_refsource_VUPEN
• www.mandriva.comMDKSA-2006:156http://www.mandriva.com/security/advisories?name=MDKSA-2006:156vendor-advisoryx_refsource_MANDRIVA
• www.securityfocus.com19714http://www.securityfocus.com/bid/19714vdb-entryx_refsource_BID
• www.novell.comSUSE-SR:2006:021http://www.novell.com/linux/security/advisories/2006_21_sr.htmlvendor-advisoryx_refsource_SUSE
• sunsolve.sun.com102664http://sunsolve.sun.com/search/document.do?assetkey=1-26-102664-1vendor-advisoryx_refsource_SUNALERT
• secunia.com22369http://secunia.com/advisories/22369third-party-advisoryx_refsource_SECUNIA
• www.openbsd.org[3.8] 20060825 010: SECURITY FIX: August 25, 2006http://www.openbsd.org/errata38.html#sendmail3vendor-advisoryx_refsource_OPENBSD
• secunia.com21696http://secunia.com/advisories/21696third-party-advisoryx_refsource_SECUNIA