CVE-2006-5298

Description

The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.

References

http://www.ubuntu.com/usn/usn-373-1

http://www.trustix.org/errata/2006/0061/

http://www.mandriva.com/security/advisories?name=MDKSA-2006:190

http://secunia.com/advisories/22686

http://secunia.com/advisories/22685

http://secunia.com/advisories/22640

http://secunia.com/advisories/22613

http://marc.info/?l=mutt-dev&m=115999486426292&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3