CVE-2006-5297
published 2006-10-16CVE-2006-5297: Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to…
PriorityP410low1.2CVSS 2.0
AVLACHAuNCNIPAN
EPSS
0.35%
27.4th percentile
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mutt | < mutt 1.5.13-1.1 (bookworm) | mutt 1.5.13-1.1 (bookworm) |
| mutt | mutt | <= 1.5.12 | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
CVSS provenance
nvdv2.01.2LOWAV:L/AC:H/Au:N/C:N/I:P/A:N
osv1.2LOW
vendor_debian1.2LOW
vendor_redhat1.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p7qx-2j9h-c63p: Race condition in the safe_open function in the Mutt mail client 1
ghsa_unreviewed·2022-05-01
CVE-2006-5297 [LOW] GHSA-p7qx-2j9h-c63p: Race condition in the safe_open function in the Mutt mail client 1
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
OSV
CVE-2006-5297: Race condition in the safe_open function in the Mutt mail client 1
osv·2006-10-16·CVSS 1.2
CVE-2006-5297 [LOW] CVE-2006-5297: Race condition in the safe_open function in the Mutt mail client 1
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
Ubuntu
mutt vulnerabilities
vendor_ubuntu·2006-11-01
CVE-2006-5297 mutt vulnerabilities
Title: mutt vulnerabilities
Summary: mutt vulnerabilities
Race conditions were discovered in mutt's handling of temporary files.
Under certain conditions when using a shared temp directory (the
default), other local users could overwrite arbitrary files owned by the
user running mutt. This vulnerability is more likely when the temp
directory is over NFS.
Instructions: After a standard system upgrade you need to restart mutt to effect the
necessary changes.
Red Hat
Multiple mutt tempfile race conditions
vendor_redhat·2006-10-04·CVSS 1.2
CVE-2006-5297 [LOW] Multiple mutt tempfile race conditions
Multiple mutt tempfile race conditions
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
Statement: Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
The risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.
Debian
CVE-2006-5297: mutt - Race condition in the safe_open function in the Mutt mail client 1.5.12 and earl...
vendor_debian·2006·CVSS 1.2
CVE-2006-5297 [LOW] CVE-2006-5297: mutt - Race condition in the safe_open function in the Mutt mail client 1.5.12 and earl...
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
Scope: local
bookworm: resolved (fixed in 1.5.13-1.1)
bullseye: resolved (fixed in 1.5.13-1.1)
forky: resolved (fixed in 1.5.13-1.1)
sid: resolved (fixed in 1.5.13-1.1)
trixie: resolved (fixed in 1.5.13-1.1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2006-5297 Multiple mutt tempfile race conditions
bugzilla·2007-07-20·CVSS 1.2
CVE-2006-5297 [LOW] CVE-2006-5297 Multiple mutt tempfile race conditions
CVE-2006-5297 Multiple mutt tempfile race conditions
Clone for RHEL2.1
+++ This bug was initially created as a clone of Bug #211085 +++
Description of problem:
Mutt contains two race condition issues in its temporary file handling system.
First one is caused by O_EXCL problem on NFS volumes (CVE-2006-5297). Second one
is lack of check of file mode and ownership of temporary file after file
creation attempt (CVE-2006-5298).
Version-Release number of selected component (if applicable):
All mutt versions prior to 1.5.12
mutt 1.4.1-12.el4
How reproducible:
Racing with mutt wile it attempts to create and use a temporary file.
Fix:
This [1] is how was the issue fixed in mutt's CVS, following the discussion and
patch proposal in mutt-dev mailing list [2]. Eventually review.
[1] http:/
Bugzilla
CVE-2006-5297 Multiple mutt tempfile race conditions
bugzilla·2006-10-17·CVSS 1.2
CVE-2006-5297 [LOW] CVE-2006-5297 Multiple mutt tempfile race conditions
CVE-2006-5297 Multiple mutt tempfile race conditions
Description of problem:
Mutt contains two race condition issues in its temporary file handling system.
First one is caused by O_EXCL problem on NFS volumes (CVE-2006-5297). Second one
is lack of check of file mode and ownership of temporary file after file
creation attempt (CVE-2006-5298).
Version-Release number of selected component (if applicable):
All mutt versions prior to 1.5.12
mutt 1.4.1-12.el4
How reproducible:
Racing with mutt wile it attempts to create and use a temporary file.
Fix:
This [1] is how was the issue fixed in mutt's CVS, following the discussion and
patch proposal in mutt-dev mailing list [2]. Eventually review.
[1] http://dev.mutt.org/cgi-bin/viewcvs.cgi/mutt/lib.c?r1=3.20&r2=3.21
[2] http://marc.theaimsg
http://marc.info/?l=mutt-dev&m=115999486426292&w=2http://secunia.com/advisories/22613http://secunia.com/advisories/22640http://secunia.com/advisories/22685http://secunia.com/advisories/22686http://secunia.com/advisories/25529http://www.mandriva.com/security/advisories?name=MDKSA-2006:190http://www.redhat.com/support/errata/RHSA-2007-0386.htmlhttp://www.securityfocus.com/bid/20733http://www.trustix.org/errata/2006/0061/http://www.ubuntu.com/usn/usn-373-1http://www.vupen.com/english/advisories/2006/4176https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601http://marc.info/?l=mutt-dev&m=115999486426292&w=2http://secunia.com/advisories/22613http://secunia.com/advisories/22640http://secunia.com/advisories/22685http://secunia.com/advisories/22686http://secunia.com/advisories/25529http://www.mandriva.com/security/advisories?name=MDKSA-2006:190http://www.redhat.com/support/errata/RHSA-2007-0386.htmlhttp://www.securityfocus.com/bid/20733http://www.trustix.org/errata/2006/0061/http://www.ubuntu.com/usn/usn-373-1http://www.vupen.com/english/advisories/2006/4176https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601
2006-10-16
Published