1.2

CVE-2006-5298

The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.

Data is provided by the National Vulnerability Database (NVD)
Mutt ≫ Mutt Version <= 1.5.12
Mutt ≫ Mutt Version0.95.6
Mutt ≫ Mutt Version1.2.1
Mutt ≫ Mutt Version1.2.5
Mutt ≫ Mutt Version1.2.5.1
Mutt ≫ Mutt Version1.2.5.4
Mutt ≫ Mutt Version1.2.5.5
Mutt ≫ Mutt Version1.2.5.12
Mutt ≫ Mutt Version1.2.5.12_ol
Mutt ≫ Mutt Version1.3.12
Mutt ≫ Mutt Version1.3.12.1
Mutt ≫ Mutt Version1.3.16
Mutt ≫ Mutt Version1.3.17
Mutt ≫ Mutt Version1.3.22
Mutt ≫ Mutt Version1.3.24
Mutt ≫ Mutt Version1.3.25
Mutt ≫ Mutt Version1.3.27
Mutt ≫ Mutt Version1.3.28
Mutt ≫ Mutt Version1.4.0
Mutt ≫ Mutt Version1.4.1
Mutt ≫ Mutt Version1.4.2
Mutt ≫ Mutt Version1.4.2.1
Mutt ≫ Mutt Version1.5.3
Mutt ≫ Mutt Version1.5.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.187
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 1.2 1.9 2.9
AV:L/AC:H/Au:N/C:N/I:P/A:N