CVE-2006-5297
CVE-2006-5297
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/25529
- http://marc.info/?l=mutt-dev&m=115999486426292&w=2
- http://www.securityfocus.com/bid/20733
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601
- http://www.trustix.org/errata/2006/0061/
- http://secunia.com/advisories/22640
- http://secunia.com/advisories/22613
- http://secunia.com/advisories/22685
- http://secunia.com/advisories/22686
- http://www.ubuntu.com/usn/usn-373-1
- http://www.redhat.com/support/errata/RHSA-2007-0386.html
- http://www.vupen.com/english/advisories/2006/4176
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:190
- https://nvd.nist.gov/vuln/detail/CVE-2006-5297