{"uuid": "5bb45ed6-10f1-43e6-a180-b4b1d6b1a7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-6253", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/local/netbsd_mail_local.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die \", \"akat1\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to exploit a race condition in mail.local with SUID bit set on:\\n          NetBSD 7.0 - 7.0.1 (verified on 7.0.1)\\n          NetBSD 6.1 - 6.1.5\\n          NetBSD 6.0 - 6.0.6\\n          Successful exploitation relies on a crontab job with root privilege, which may take up to 10min to execute.\", \"disclosure_date\": \"2016-07-07\", \"fullname\": \"exploit/unix/local/netbsd_mail_local\", \"is_install_path\": true, \"mod_time\": \"2023-03-13 10:31:27 +0000\", \"name\": \"NetBSD mail.local Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"os-resource-loss\"]}, \"path\": \"/modules/exploits/unix/local/netbsd_mail_local.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"unix/local/netbsd_mail_local\", \"references\": [\"URL-http://akat1.pl/?id=2\", \"EDB-40141\", \"CVE-2016-6253\", \"URL-http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:38.454975Z"}