CVE

Id
93073  
CVE No.
CVE-2016-6253  
Status
Candidate  
Description
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.  
Phase
Assigned (20160720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792448 93073 CVE-2016-6253 EXPLOIT-DB:40141  View
792449 93073 CVE-2016-6253 URL:https://www.exploit-db.com/exploits/40141/  View
792450 93073 CVE-2016-6253 EXPLOIT-DB:40385  View
792451 93073 CVE-2016-6253 URL:https://www.exploit-db.com/exploits/40385/  View
792452 93073 CVE-2016-6253 MISC:http://akat1.pl/?id=2  View
792453 93073 CVE-2016-6253 MISC:http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html  View
792454 93073 CVE-2016-6253 MISC:http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_local  View
792455 93073 CVE-2016-6253 NETBSD:NetBSD-SA2016-006  View
792456 93073 CVE-2016-6253 URL:http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc  View
792457 93073 CVE-2016-6253 BID:92101  View
792458 93073 CVE-2016-6253 URL:http://www.securityfocus.com/bid/92101  View
792459 93073 CVE-2016-6253 SECTRACK:1036429  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5351 JVNDB-2016-006124 SunGard eTRAKiT に SQL インジェクションの脆弱性 SunGard Public Sector LLC. が提供する eTRAKiT には、遠隔の第三者がバックエンドのデータベース上で SQL コマンドのサブセットを実行可能な脆弱性が存在します。 CVE-2016-6566 93073 9.3 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006124.html  View