AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-5298

LOW · CVSS 1.2 EPSS 0.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-10-16 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 1.2. See the original NVD description below for full technical details.

CVE
CVE-2006-5298
Severity
LOW
CVSS
1.2
EPSS
0.30%

Original NVD Description

The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.