mutt

Page content
  • Author: voroskoi
  • Vulnerable: 1.4.2.2-1
  • Unaffected: 1.4.2.2-2siwenna1

Some weaknesses have been reported in mutt, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges.

  1. The “safe_open()” function insecurely creates temporary files on NFS directories, because the O_EXEC flag is not always correctly honored. This may be exploited to overwrite arbitrary files.
  2. A race condition exists within the “mutt_adv_mktemp()” function between calling “mktemp()” and “safe_fopen()”. This may be exploited to create files with weak permissions.

CVEs: