CVE-2006-5297

CVE Details

Release Date:	2006-10-16
Impact:	Low	What is this?

Description

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

See more information about CVE-2006-5297 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	1.2
Vector String:	AV:L/AC:H/Au:N/C:N/I:P/A:N
Version:	2.0
Attack Vector:	Local
Attack Complexity:	High
Authentication:	None
Confidentiality Impact:	None
Integrity Impact:	Partial
Availability Impact:	None

Errata information

Platform	Errata	Release Date
Oracle Enterprise Linux version 3 (mutt)	ELSA-2007-0386	2007-06-04
Oracle Enterprise Linux version 4 (mutt)	ELSA-2007-0386	2007-06-04
Oracle Linux version 5 (mutt)	ELSA-2007-0386	2007-06-04