PT-2006-6019 · Mutt+2 · Mutt+2

Derek Martin · Publicado 2006-10-16 · Atualizado 2017-10-11 · CVE-2006-5297

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mutt versions 1.5.12 and earlier

Description The issue is related to a race condition in the safe open function when creating temporary files in an NFS filesystem. This allows local users to overwrite arbitrary files due to limitations of the use of the O EXCL flag on NFS filesystems.

Recommendations For versions 1.5.12 and earlier, consider applying configuration changes to avoid using NFS filesystems for temporary files until a patch is available. As a temporary workaround, restrict access to sensitive files and directories to minimize the risk of exploitation.

Correção

Identificadores relacionados

ALT-PU-2015-1458

CVE-2006-5297

RHSA-2007:0386

RHSA-2007_0386

Produtos afetados

Alt Linux

Mutt

Red Hat

Referências · 30

• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5297 · Aviso do Fabricante
• http://secunia.com/advisories/25529 · Nota
• http://vupen.com/english/advisories/2006/4176 · Nota
• https://access.redhat.com/security/cve/CVE-2007-1558 · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-5297 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1268 · Nota de Segurança
• http://secunia.com/advisories/22686 · Nota
• http://securityfocus.com/bid/20733 · Nota
• http://trustix.org/errata/2006/0061 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2351 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2006-5297 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2007-0386.html · Aviso do Fabricante
• http://ubuntu.com/usn/usn-373-1 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601 · Nota
• https://access.redhat.com/errata/RHSA-2007:0386 · Nota