CVE-2006-6131 - Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory

Back Back to CVE browser

MEDIUM

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory

Published Nov 28, 2006

6.2

MEDIUM

CVSS 2.0

EPSS 0.88%

Description

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://secunia.com/advisories/22906
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/1921
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1017239
vdb-entryx_refsource_SECTRACKExploit
http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt
x_refsource_MISC
http://www.osvdb.org/30450
vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/451832/100/200/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21123
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4539
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30308
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/22906		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/1921		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1017239		vdb-entryx_refsource_SECTRACKExploit
http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt		x_refsource_MISC
http://www.osvdb.org/30450		vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/451832/100/200/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21123		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4539		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30308		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 28, 2006

Updated Aug 7, 2024

Reserved Nov 27, 2006

Link CVE-2006-6131

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6131

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6131

Description

Affected products

Remediation

References (9)

Change history (0)