CVE-2006-5298
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify...
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
Exploit likelihood
What each source reports
NVD Score used
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
- Record
CVE-2006-5298- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
- Record
CVE-2006-5298- Updated
- 2026-11-02
EUVDEUVD-2006-5283 No score
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
- Record
EUVD-2006-5283- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c2x8-j25c-mhfm No score
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify...
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
- Record
GHSA-c2x8-j25c-mhfm- Updated
- 2026-11-02
OSV No score
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
- Record
CVE-2006-5298- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5298 No score
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
- Record
DEBIAN-CVE-2006-5298- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5298 is a low vulnerability (CVSS 1.2) in Mutt, published October 16, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in mutt 1.5.13-1.1.