PT-2006-6019 · Mutt+2 · Mutt+2

Derek Martin · Published 2006-10-16 · Updated 2017-10-11 · CVE-2006-5297

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mutt versions 1.5.12 and earlier

Description The issue is related to a race condition in the safe open function when creating temporary files in an NFS filesystem. This allows local users to overwrite arbitrary files due to limitations of the use of the O EXCL flag on NFS filesystems.

Recommendations For versions 1.5.12 and earlier, consider applying configuration changes to avoid using NFS filesystems for temporary files until a patch is available. As a temporary workaround, restrict access to sensitive files and directories to minimize the risk of exploitation.

Fix

Related Identifiers

ALT-PU-2015-1458

CVE-2006-5297

RHSA-2007:0386

RHSA-2007_0386

Affected Products

Alt Linux

Mutt

Red Hat

References · 30

• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5297 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-5297 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1268 · Security Note
• http://trustix.org/errata/2006/0061 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2351 · Security Note
• https://osv.dev/vulnerability/CVE-2006-5297 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0386.html · Vendor Advisory
• http://ubuntu.com/usn/usn-373-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:190 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-5297 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1458 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5298 · Security Note
• https://bdu.fstec.ru/vul/2015-01338 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5297 · Security Note