PT-2006-6020 · Mutt+1 · Mutt+1

Derek Martin · Publicado 2006-10-16 · Atualizado 2016-10-18 · CVE-2006-5298

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mutt versions 1.5.12 and earlier

Description The issue arises from the mutt adv mktemp function in the Mutt mail client, which fails to properly verify that temporary files have been created with restricted permissions. This could allow local users to create files with weak permissions via a race condition between the mktemp and safe fopen function calls.

Recommendations For versions 1.5.12 and earlier, update to a version that addresses this issue, as the current version does not properly restrict permissions for temporary files.

Correção

Identificadores relacionados

ALT-PU-2015-1458

CVE-2006-5298

Produtos afetados

Alt Linux

Mutt

Referências · 21

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1268 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2006-5298 · Aviso do Fabricante
• http://secunia.com/advisories/22686 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2351 · Nota de Segurança
• http://trustix.org/errata/2006/0061 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2006-5298 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5298 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-373-1 · Aviso do Fabricante
• http://marc.info/?l=mutt-dev&m=115999486426292&w=2 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:190 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0467 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2006-5298 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5298 · Nota de Segurança
• http://secunia.com/advisories/22613 · Nota
• https://errata.altlinux.org/ALT-PU-2015-1458 · Aviso do Fabricante