Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2006-5297

Date: October 16, 2006

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Severity Score

Related Resources (17)

https://nvd.nist.gov/vuln/detail/CVE-2006-5297
http://marc.info/?l=mutt-dev&m=115999486426292&w=2
http://www.vupen.com/english/advisories/2006/4176
https://people.canonical.com/~ubuntu-security/cve/CVE-2006-5297
http://www.trustix.org/errata/2006/0061/
http://www.securityfocus.com/bid/20733
http://www.mandriva.com/security/advisories?name=MDKSA-2006:190
http://secunia.com/advisories/22686
http://www.redhat.com/support/errata/RHSA-2007-0386.html
http://www.ubuntu.com/usn/usn-373-1
http://secunia.com/advisories/22613
http://secunia.com/advisories/25529
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601
http://secunia.com/advisories/22685
https://access.redhat.com/security/cve/CVE-2006-5297
http://secunia.com/advisories/22640
https://www.mend.io/vulnerability-database/CVE-2006-5297

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): HIGH
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us