Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2006-5298
1.2
LOWCVSS v2
Published
October 16, 2006
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
muttmua/muttGitLab
GitLab= 1.3.12.1, = 1.2.5.5, = 0.95.6, = 1.3.27, = 1.4.2.1, = 1.3.16, = 1.2.5, = 1.3.25, = 1.4.1, = 1.2.1, = 1.4.0, = 1.3.12, = 1.3.28, = 1.2.5.1, = 1.2.5.12, = 1.3.17, = 1.3.22, = 1.4.2, = 1.5.10, = 1.2.5.12_ol, = 1.2.5.4, = 1.3.24, = 1.5.3, <= 1.5.12NVD
muttmua/mutt
GitHubThe Mutt E-Mail Client github mirror. Please use gitlab for issues/pull requests.
GitHubThe Mutt E-Mail Client github mirror. Please use gitlab for issues/pull requests.= 1.3.12.1, = 1.2.5.5, = 0.95.6, = 1.3.27, = 1.4.2.1, = 1.3.16, = 1.2.5, = 1.3.25, = 1.4.1, = 1.2.1, = 1.4.0, = 1.3.12, = 1.3.28, = 1.2.5.1, = 1.2.5.12, = 1.3.17, = 1.3.22, = 1.4.2, = 1.5.10, = 1.2.5.12_ol, = 1.2.5.4, = 1.3.24, = 1.5.3, <= 1.5.12NVD