CVE-2016-6253 mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the...
HighCVSS 7.8
EPSS 3.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netbsd | = 6.0 | No fix listed |
| netbsd | = 6.0.1 | No fix listed |
| netbsd | = 6.0.2 | No fix listed |
| netbsd | = 6.0.3 | No fix listed |
| netbsd | = 6.0.4 | No fix listed |
| netbsd | = 6.0.5 | No fix listed |
| netbsd | = 6.0.6 | No fix listed |
| netbsd | = 6.1 | No fix listed |
| netbsd | = 6.1.1 | No fix listed |
| netbsd | = 6.1.2 | No fix listed |
| netbsd | = 6.1.3 | No fix listed |
| netbsd | = 6.1.4 | No fix listed |
| netbsd | = 6.1.5 | No fix listed |
| netbsd | = 7.0 | No fix listed |
References
- akat1.pl exploit third-party-advisory
- NetBSD-SA2016-006 vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- www.rapid7.com exploit third-party-advisory vdb-entry
- 92101 third-party-advisory vdb-entry
- 1036429 third-party-advisory vdb-entry
- 40141 exploit third-party-advisory vdb-entry
- 40385 exploit third-party-advisory vdb-entry