CVEvulnerability

CVE-2006-5297

1.2 LOW Published 2006-10-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-10-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:N

Description

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Affected configurations

• mutt mutt (<= 1.5.12) • mutt mutt 0.95.6 • mutt mutt 1.2.1 • mutt mutt 1.2.5 • mutt mutt 1.2.5.1 • mutt mutt 1.2.5.4 • mutt mutt 1.2.5.5 • mutt mutt 1.2.5.12 • mutt mutt 1.2.5.12 ol • mutt mutt 1.3.12 • mutt mutt 1.3.12.1 • mutt mutt 1.3.16 • mutt mutt 1.3.17 • mutt mutt 1.3.22 • mutt mutt 1.3.24 • mutt mutt 1.3.25 • mutt mutt 1.3.27 • mutt mutt 1.3.28 • mutt mutt 1.4.0 • mutt mutt 1.4.1 • mutt mutt 1.4.2 • mutt mutt 1.4.2.1 • mutt mutt 1.5.3 • mutt mutt 1.5.10

References