CVE-2006-5297 - CVE House
Back to Database
Status published Low CVE-2006-5297

Race condition in the safe_open function in the Mutt mail...

Vulnerability Description

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5297

Credits & Attribution

No credits recorded in the NVD database.

References

More from mutt

View All →
CVE-2021-3181
rfc822.c in Mutt through 2.0.4 allows remote attackers to cause...
Medium 6.5
CVE-2021-32055
Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through...
Critical 9.1
CVE-2020-28896
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure...
Medium 5.3
CVE-2020-14954
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS...
Medium 5.9
CVE-2020-14154
Mutt before 1.14.3 proceeds with a connection even if, in...
Medium 4.8

Affected Vendor

Affected Software

mutt
Vulnerable Versions:
0, 0.95.6, 1.2.1, 1.2.5, 1.2.5.1, 1.2.5.4, 1.2.5.5, 1.2.5.12, 1.2.5.12_ol, 1.3.12, 1.3.12.1, 1.3.16, 1.3.17, 1.3.22, 1.3.24, 1.3.25, 1.3.27, 1.3.28, 1.4.0, 1.4.1, 1.4.2, 1.4.2.1, 1.5.3, 1.5.10

Timeline

Official Publish: October 16th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.