NVD

Id
63901  
Name
CVE-2006-5298  
Description
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-10-16  
Modified Date
2016-10-17  
Seq
2006-5298  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333084 63901 CVE-2006-5298 [mutt-dev] 20061004 security problem with temp files [was Re: mutt_adv_mktemp() ?]  View
333085 63901 CVE-2006-5298 MDKSA-2006:190  View
333086 63901 CVE-2006-5298 2006-0061  View
333087 63901 CVE-2006-5298 USN-373-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59991 JVNDB-2006-002257 Mutt mail client の mutt_adv_mktemp 関数におけるファイルを作成される脆弱性 Mutt mail client の mutt_adv_mktemp 関数は、制限されたパーミッションでテンポラリファイルが作成されたことを適切に検証しないため、脆弱なパーミッションでファイルを作成される脆弱性が存在します。 CVE-2006-5298 21400 CVE-2006-5298 63901 1.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002257.html 2006-10-16 2012-09-25 View