CVE-2016-6253: High severity NetBSD NetBSD vulnerability
Published Jan 20, 2017
·Updated
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
Affected Software
14 affected components
NetBSD NetBSD=6.0
NetBSD NetBSD=6.0.1
NetBSD NetBSD=6.0.2
NetBSD NetBSD=6.0.3
NetBSD NetBSD=6.0.4
NetBSD NetBSD=6.0.5
NetBSD NetBSD=6.0.6
NetBSD NetBSD=6.1
NetBSD NetBSD=6.1.1
NetBSD NetBSD=6.1.2
NetBSD NetBSD=6.1.3
NetBSD NetBSD=6.1.4
NetBSD NetBSD=6.1.5
NetBSD NetBSD=7.0
Event History
Jan 20, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-6253?
CVE-2016-6253 has been assigned a moderate severity level due to potential unauthorized file access and manipulation.
2
How do I fix CVE-2016-6253?
To fix CVE-2016-6253, upgrade to a patched version of NetBSD that resolves the symlink vulnerability.
3
Who is affected by CVE-2016-6253?
CVE-2016-6253 affects local users of NetBSD versions 6.0 through 7.0.
4
What type of attack does CVE-2016-6253 exploit?
CVE-2016-6253 exploits a symlink attack that allows local users to change file ownership or data.
5
Is there a workaround for CVE-2016-6253?
A temporary workaround for CVE-2016-6253 may involve adjusting file permissions to limit access until a patch can be applied.