Every CVE Search/ Get API key

CVE-2006-5297

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when...

1.2 LowFix available

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Exploit likelihood

0.36%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 1.2

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
CVE-2006-5297
CVSS 2.0
1.2 LowAV:L/AC:H/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
CVE-2006-5297
Updated
2026-11-02
EUVDEUVD-2006-5282 No score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
EUVD-2006-5282
Updated
2026-11-03
GitHub AdvisoriesGHSA-p7qx-2j9h-c63p No score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when...

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
GHSA-p7qx-2j9h-c63p
Updated
2026-11-02
OSV No score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
CVE-2006-5297
Updated
2026-11-02
OSVDEBIAN-CVE-2006-5297 No score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
DEBIAN-CVE-2006-5297
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mutt
Debian:12
 before 1.5.13-1.1
1.5.13-1.1
mutt
Debian:13
 before 1.5.13-1.1
1.5.13-1.1
mutt
Debian:14
 before 1.5.13-1.1
1.5.13-1.1
mutt
Red Hat:enterprise_linux:3::as
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt-debuginfo
Red Hat:enterprise_linux:3::as
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:3::desktop
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:3::es
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt-debuginfo
Red Hat:enterprise_linux:3::es
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:3::ws
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
Show 13 moreShow less
Affected packages
PackageAffectedFixed
mutt-debuginfo
Red Hat:enterprise_linux:3::ws
 before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:4::as
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::as
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:4::desktop
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:4::es
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::es
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:4::ws
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::ws
 before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:5::client
 before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5
mutt-debuginfo
Red Hat:enterprise_linux:5::client
 before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5
mutt
Red Hat:enterprise_linux:5::server
 before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5
mutt-debuginfo
Red Hat:enterprise_linux:5::server
 before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-5297 is a low vulnerability (CVSS 1.2) in Mutt, published October 16, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in mutt 1.5.13-1.1.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open