[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-5297Date: (C)2006-10-16   (M)2023-12-22


Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 1.2
Exploit Score: 1.9
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: HIGH
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
2006-0061
BID-20733
SECUNIA-22613
SECUNIA-22640
SECUNIA-22685
SECUNIA-22686
SECUNIA-25529
ADV-2006-4176
MDKSA-2006:190
RHSA-2007:0386
USN-373-1
http://marc.info/?l=mutt-dev&m=115999486426292&w=2

CPE    3
cpe:/a:mutt:mutt:1.5.10
cpe:/a:mutt:mutt:1.5.3
cpe:/a:mutt:mutt:1.5.12

© SecPod Technologies