CVE-2006-5298
published 2006-10-16CVE-2006-5298: The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted…
PriorityP46low1.2CVSS 2.0
AVLACHAuNCNIPAN
EPSS
0.30%
21.8th percentile
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mutt | < mutt 1.5.13-1.1 (bookworm) | mutt 1.5.13-1.1 (bookworm) |
| mutt | mutt | <= 1.5.12 | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
| mutt | mutt | — | — |
CVSS provenance
nvdv2.01.2LOWAV:L/AC:H/Au:N/C:N/I:P/A:N
osv1.2LOW
vendor_debian1.2LOW
vendor_redhat1.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
mutt vulnerabilities
vendor_ubuntu·2006-11-01
CVE-2006-5297 mutt vulnerabilities
Title: mutt vulnerabilities
Summary: mutt vulnerabilities
Race conditions were discovered in mutt's handling of temporary files.
Under certain conditions when using a shared temp directory (the
default), other local users could overwrite arbitrary files owned by the
user running mutt. This vulnerability is more likely when the temp
directory is over NFS.
Instructions: After a standard system upgrade you need to restart mutt to effect the
necessary changes.
Debian
CVE-2006-5298: mutt - The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not...
vendor_debian·2006·CVSS 1.2
CVE-2006-5298 [LOW] CVE-2006-5298: mutt - The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not...
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
Scope: local
bookworm: resolved (fixed in 1.5.13-1.1)
bullseye: resolved (fixed in 1.5.13-1.1)
forky: resolved (fixed in 1.5.13-1.1)
sid: resolved (fixed in 1.5.13-1.1)
trixie: resolved (fixed in 1.5.13-1.1)
Red Hat
CVE-2006-5298: The mutt_adv_mktemp function in the Mutt mail client 1
vendor_redhat·CVSS 1.2
CVE-2006-5298 [LOW] CVE-2006-5298: The mutt_adv_mktemp function in the Mutt mail client 1
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
Statement: Red Hat is aware of this issue and is tracking it via the following bug:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=211085
The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:
http://www.redhat.com/security/updates/classification/
Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
The risks assoc
GHSA
GHSA-c2x8-j25c-mhfm: The mutt_adv_mktemp function in the Mutt mail client 1
ghsa_unreviewed·2022-05-01
CVE-2006-5298 [LOW] GHSA-c2x8-j25c-mhfm: The mutt_adv_mktemp function in the Mutt mail client 1
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
OSV
CVE-2006-5298: The mutt_adv_mktemp function in the Mutt mail client 1
osv·2006-10-16·CVSS 1.2
CVE-2006-5298 [LOW] CVE-2006-5298: The mutt_adv_mktemp function in the Mutt mail client 1
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2006-5297 Multiple mutt tempfile race conditions
bugzilla·2007-07-20·CVSS 1.2
CVE-2006-5297 [LOW] CVE-2006-5297 Multiple mutt tempfile race conditions
CVE-2006-5297 Multiple mutt tempfile race conditions
Clone for RHEL2.1
+++ This bug was initially created as a clone of Bug #211085 +++
Description of problem:
Mutt contains two race condition issues in its temporary file handling system.
First one is caused by O_EXCL problem on NFS volumes (CVE-2006-5297). Second one
is lack of check of file mode and ownership of temporary file after file
creation attempt (CVE-2006-5298).
Version-Release number of selected component (if applicable):
All mutt versions prior to 1.5.12
mutt 1.4.1-12.el4
How reproducible:
Racing with mutt wile it attempts to create and use a temporary file.
Fix:
This [1] is how was the issue fixed in mutt's CVS, following the discussion and
patch proposal in mutt-dev mailing list [2]. Eventually review.
[1] http:/
Bugzilla
CVE-2006-5297 Multiple mutt tempfile race conditions
bugzilla·2006-10-17·CVSS 1.2
CVE-2006-5297 [LOW] CVE-2006-5297 Multiple mutt tempfile race conditions
CVE-2006-5297 Multiple mutt tempfile race conditions
Description of problem:
Mutt contains two race condition issues in its temporary file handling system.
First one is caused by O_EXCL problem on NFS volumes (CVE-2006-5297). Second one
is lack of check of file mode and ownership of temporary file after file
creation attempt (CVE-2006-5298).
Version-Release number of selected component (if applicable):
All mutt versions prior to 1.5.12
mutt 1.4.1-12.el4
How reproducible:
Racing with mutt wile it attempts to create and use a temporary file.
Fix:
This [1] is how was the issue fixed in mutt's CVS, following the discussion and
patch proposal in mutt-dev mailing list [2]. Eventually review.
[1] http://dev.mutt.org/cgi-bin/viewcvs.cgi/mutt/lib.c?r1=3.20&r2=3.21
[2] http://marc.theaimsg
http://marc.info/?l=mutt-dev&m=115999486426292&w=2http://secunia.com/advisories/22613http://secunia.com/advisories/22640http://secunia.com/advisories/22685http://secunia.com/advisories/22686http://www.mandriva.com/security/advisories?name=MDKSA-2006:190http://www.trustix.org/errata/2006/0061/http://www.ubuntu.com/usn/usn-373-1http://marc.info/?l=mutt-dev&m=115999486426292&w=2http://secunia.com/advisories/22613http://secunia.com/advisories/22640http://secunia.com/advisories/22685http://secunia.com/advisories/22686http://www.mandriva.com/security/advisories?name=MDKSA-2006:190http://www.trustix.org/errata/2006/0061/http://www.ubuntu.com/usn/usn-373-1
2006-10-16
Published