Lucene search

MitreCVE-2016-6253

HistoryJan 20, 2017 - 3:59 p.m.

CVE-2016-6253

2017-01-2015:59:00

CWE-59

mitre

web.nvd.nist.gov

netbsd

cve-2016-6253

mail.local

symlink attack

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

38.8%

JSON

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.

Affected configurations

Nvd

Node

netbsdnetbsdMatch6.0

netbsdnetbsdMatch6.0.1

netbsdnetbsdMatch6.0.2

netbsdnetbsdMatch6.0.3

netbsdnetbsdMatch6.0.4

netbsdnetbsdMatch6.0.5

netbsdnetbsdMatch6.0.6

netbsdnetbsdMatch6.1

netbsdnetbsdMatch6.1.1

netbsdnetbsdMatch6.1.2

netbsdnetbsdMatch6.1.3

netbsdnetbsdMatch6.1.4

netbsdnetbsdMatch6.1.5

netbsdnetbsdMatch7.0

VendorProductVersionCPE
netbsdnetbsd6.0cpe:2.3:o:netbsd:netbsd:6.0:*:*:*:*:*:*:*
netbsdnetbsd6.0.1cpe:2.3:o:netbsd:netbsd:6.0.1:*:*:*:*:*:*:*
netbsdnetbsd6.0.2cpe:2.3:o:netbsd:netbsd:6.0.2:*:*:*:*:*:*:*
netbsdnetbsd6.0.3cpe:2.3:o:netbsd:netbsd:6.0.3:*:*:*:*:*:*:*
netbsdnetbsd6.0.4cpe:2.3:o:netbsd:netbsd:6.0.4:*:*:*:*:*:*:*
netbsdnetbsd6.0.5cpe:2.3:o:netbsd:netbsd:6.0.5:*:*:*:*:*:*:*
netbsdnetbsd6.0.6cpe:2.3:o:netbsd:netbsd:6.0.6:*:*:*:*:*:*:*
netbsdnetbsd6.1cpe:2.3:o:netbsd:netbsd:6.1:*:*:*:*:*:*:*
netbsdnetbsd6.1.1cpe:2.3:o:netbsd:netbsd:6.1.1:*:*:*:*:*:*:*
netbsdnetbsd6.1.2cpe:2.3:o:netbsd:netbsd:6.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netbsd	netbsd	6.0	cpe:2.3:o:netbsd:netbsd:6.0:::::::*
netbsd	netbsd	6.0.1	cpe:2.3:o:netbsd:netbsd:6.0.1:::::::*
netbsd	netbsd	6.0.2	cpe:2.3:o:netbsd:netbsd:6.0.2:::::::*
netbsd	netbsd	6.0.3	cpe:2.3:o:netbsd:netbsd:6.0.3:::::::*
netbsd	netbsd	6.0.4	cpe:2.3:o:netbsd:netbsd:6.0.4:::::::*
netbsd	netbsd	6.0.5	cpe:2.3:o:netbsd:netbsd:6.0.5:::::::*
netbsd	netbsd	6.0.6	cpe:2.3:o:netbsd:netbsd:6.0.6:::::::*
netbsd	netbsd	6.1	cpe:2.3:o:netbsd:netbsd:6.1:::::::*
netbsd	netbsd	6.1.1	cpe:2.3:o:netbsd:netbsd:6.1.1:::::::*
netbsd	netbsd	6.1.2	cpe:2.3:o:netbsd:netbsd:6.1.2:::::::*

Rows per page:

1-10 of 141

References

akat1.pl/?id=2

ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc

packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html

www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_local

www.securityfocus.com/bid/92101

www.securitytracker.com/id/1036429

www.exploit-db.com/exploits/40141/

www.exploit-db.com/exploits/40385/

Social References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

38.8%

JSON

Related for CVE-2016-6253