Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-6253

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.

Published

2017-01-20T15:59:00.567

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

10.0

Weaknesses

Type: Primary
CWE-59

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	netbsd	netbsd	6.0	Yes
Operating System	netbsd	netbsd	6.0.1	Yes
Operating System	netbsd	netbsd	6.0.2	Yes
Operating System	netbsd	netbsd	6.0.3	Yes
Operating System	netbsd	netbsd	6.0.4	Yes
Operating System	netbsd	netbsd	6.0.5	Yes
Operating System	netbsd	netbsd	6.0.6	Yes
Operating System	netbsd	netbsd	6.1	Yes
Operating System	netbsd	netbsd	6.1.1	Yes
Operating System	netbsd	netbsd	6.1.2	Yes
Operating System	netbsd	netbsd	6.1.3	Yes
Operating System	netbsd	netbsd	6.1.4	Yes
Operating System	netbsd	netbsd	6.1.5	Yes
Operating System	netbsd	netbsd	7.0	Yes

References

http://akat1.pl/?id=2 Exploit, Third Party Advisory ([email protected])
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc Vendor Advisory ([email protected])
http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html Exploit, Third Party Advisory, VDB Entry ([email protected])
http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_local Exploit, Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/92101 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1036429 Third Party Advisory, VDB Entry ([email protected])
https://www.exploit-db.com/exploits/40141/ Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.exploit-db.com/exploits/40385/ Exploit, Third Party Advisory, VDB Entry ([email protected])
http://akat1.pl/?id=2 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_local Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/92101 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1036429 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/40141/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/40385/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)