This is an extremely silly set of conditions to attach to "remote hole". You can litigate it, and maybe win the argument, but you're just bold-facing the asterisk that was already next to that already-tortured claim.
Can you exploit a bare OpenBSD install by default remotely, yes or not?
Everything else is bullshit.
And sshd is, by default:
- not exploitable by this bug
- PF rules are not set for incoming connections
The X issue. By default:
- PF doesn't accept any connection to X ports to
anything not coming from lo0, localhost interface
Smtpd. By default:
- it just listens on localhost
- there is no forwarding
- PF rules aren't enabled