CVE-2006-5298 - CVE House
Back to Database
Status published Low CVE-2006-5298

The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and...

Vulnerability Description

The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5298

Credits & Attribution

No credits recorded in the NVD database.

References

More from mutt

View All →
CVE-2021-3181
rfc822.c in Mutt through 2.0.4 allows remote attackers to cause...
Medium 6.5
CVE-2021-32055
Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through...
Critical 9.1
CVE-2020-28896
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure...
Medium 5.3
CVE-2020-14954
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS...
Medium 5.9
CVE-2020-14154
Mutt before 1.14.3 proceeds with a connection even if, in...
Medium 4.8

Affected Vendor

Affected Software

mutt
Vulnerable Versions:
0, 0.95.6, 1.2.1, 1.2.5, 1.2.5.1, 1.2.5.4, 1.2.5.5, 1.2.5.12, 1.2.5.12_ol, 1.3.12, 1.3.12.1, 1.3.16, 1.3.17, 1.3.22, 1.3.24, 1.3.25, 1.3.27, 1.3.28, 1.4.0, 1.4.1, 1.4.2, 1.4.2.1, 1.5.3, 1.5.10

Timeline

Official Publish: October 16th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.