CVE-2006-5297

Severity: low (CVSS 1.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-16 · updated 2026-06-16

Description

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Affected products

mutt: through 1.5.12; 0.95.6, 1.2.1, 1.2.5, 1.2.5.1, 1.2.5.4, 1.2.5.5 (+17)

References

http://marc.info/?l=mutt-dev&m=115999486426292&w=2
http://secunia.com/advisories/22613
http://secunia.com/advisories/22640
http://secunia.com/advisories/22685
http://secunia.com/advisories/22686
http://secunia.com/advisories/25529
http://www.mandriva.com/security/advisories?name=MDKSA-2006:190
http://www.redhat.com/support/errata/RHSA-2007-0386.html
http://www.securityfocus.com/bid/20733
http://www.trustix.org/errata/2006/0061/
http://www.ubuntu.com/usn/usn-373-1
http://www.vupen.com/english/advisories/2006/4176

Get alerted when CVE-2006-5297 or the next vulnerability affects your stack