Every CVESearch/Get API key

CVE-2006-5297

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when...

1.2 LowFix available

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Exploit likelihood

0.36%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used1.2

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
CVE-2006-5297
CVSS 2.0
1.2 LowAV:L/AC:H/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE ListNo score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
CVE-2006-5297
Updated
2026-11-02
EUVDEUVD-2006-5282No score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
EUVD-2006-5282
Updated
2026-11-03
GitHub AdvisoriesGHSA-p7qx-2j9h-c63pNo score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when...

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
GHSA-p7qx-2j9h-c63p
Updated
2026-11-02
OSVNo score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
CVE-2006-5297
Updated
2026-11-02
OSVDEBIAN-CVE-2006-5297No score

Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

Record
DEBIAN-CVE-2006-5297
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mutt
Debian:12
before 1.5.13-1.1
1.5.13-1.1
mutt
Debian:13
before 1.5.13-1.1
1.5.13-1.1
mutt
Debian:14
before 1.5.13-1.1
1.5.13-1.1
mutt
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
Show 13 moreShow less
Affected packages
PackageAffectedFixed
mutt-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 5:1.4.1-5.el3
5:1.4.1-5.el3
mutt
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 5:1.4.1-12.0.3.el4
5:1.4.1-12.0.3.el4
mutt
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5
mutt-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5
mutt
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5
mutt-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 5:1.4.2.2-3.0.2.el5
5:1.4.2.2-3.0.2.el5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-5297 is a low vulnerability (CVSS 1.2) in Mutt, published October 16, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in mutt 1.5.13-1.1.

References

Show 24 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open