CVEvulnerability
CVE-2016-6253
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-59
Description
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
Affected configurations
• netbsd netbsd 6.0
• netbsd netbsd 6.0.1
• netbsd netbsd 6.0.2
• netbsd netbsd 6.0.3
• netbsd netbsd 6.0.4
• netbsd netbsd 6.0.5
• netbsd netbsd 6.0.6
• netbsd netbsd 6.1
• netbsd netbsd 6.1.1
• netbsd netbsd 6.1.2
• netbsd netbsd 6.1.3
• netbsd netbsd 6.1.4
• netbsd netbsd 6.1.5
• netbsd netbsd 7.0
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://akat1.pl/?id=2 Exploit, Third Party Advisory
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc Vendor Advisory
- http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html Exploit, Third Party Advisory, VDB Entry
- http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_local Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/92101 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036429 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/40141/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/40385/ Exploit, Third Party Advisory, VDB Entry
- http://akat1.pl/?id=2 Exploit, Third Party Advisory
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc Vendor Advisory
- http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html Exploit, Third Party Advisory, VDB Entry
- http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_local Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/92101 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036429 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/40141/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/40385/ Exploit, Third Party Advisory, VDB Entry