Unscored severity · published Oct 16, 2006
CVE-2006-5297
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MU
Mutt · Mutt
through 1.5.12; 0.95.6; 1.2.1; 1.2.5; 1.2.5.1; 1.2.5.4; +18 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5297
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5297
marc.info
http://marc.info/?l=mutt-dev&m=115999486426292&w=2
secunia.com
http://secunia.com/advisories/22613
secunia.com
http://secunia.com/advisories/22640
secunia.com
http://secunia.com/advisories/22685
secunia.com
http://secunia.com/advisories/22686
secunia.com
http://secunia.com/advisories/25529
More from Mutt
9.8
CVE-2018-14362
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16
9.8
CVE-2018-14359
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16
9.8
CVE-2018-14358
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16
9.8
CVE-2018-14357
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16
9.8
CVE-2018-14356
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16