CVE search · CVE-2016-6253
CVE-2016-6253
high 7.8
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-59
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.0 | high 7.8 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 2.0 | high 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- netbsd · netbsd
References
- http://akat1.pl/?id=2ExploitThird Party Advisory
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.ascVendor Advisory
- http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.htmlExploitThird Party AdvisoryVDB Entry
- http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_localExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/92101Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036429Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/40141/ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/40385/ExploitThird Party AdvisoryVDB Entry
- http://akat1.pl/?id=2ExploitThird Party Advisory
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.ascVendor Advisory
- http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.htmlExploitThird Party AdvisoryVDB Entry
- http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_localExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/92101Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036429Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/40141/ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/40385/ExploitThird Party AdvisoryVDB Entry