CVE-2006-5297 Race condition in n/a

What is CVE-2006-5297?

CVE-2006-5297 is a low-severity vulnerability in n/a, published on 16 Oct 2006. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Which versions are affected by CVE-2006-5297?

It affects 1 product.

Products include Mutt Mutt.

How do I fix CVE-2006-5297?

Upgrade to a fixed version.

Is CVE-2006-5297 being exploited?

There is no known exploitation of CVE-2006-5297 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-32055 Memory corruption in n/a Critical 9.1
• CVE-2006-3242 Memory corruption in n/a High 7.5
• CVE-2005-2642 Memory corruption in n/a High 7.5
• CVE-2004-0078 Memory corruption in n/a High 7.5
• CVE-2003-0299 Integer overflow in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2006-5297, GHSA-p7qx-2j9h-c63p.