CVEvulnerability

CVE-2006-6131

6.2 MEDIUM Published 2006-11-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-11-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

Affected configurations

• kerio webstar (<= 5.4.2) • kerio webstar 4.0 • kerio webstar 5.1.2 • kerio webstar 5.1.3 • kerio webstar 5.2 • kerio webstar 5.2.1 • kerio webstar 5.2.2 • kerio webstar 5.2.3 • kerio webstar 5.2.4 • kerio webstar 5.3 • kerio webstar 5.3.1 • kerio webstar 5.3.2 • kerio webstar 5.3.3 • kerio webstar 5.3.4 • kerio webstar 5.4

References