CVE-2006-6131
Summary
| CVE | CVE-2006-6131 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-11-28 01:07:00 UTC |
| Updated | 2023-11-07 01:59:00 UTC |
| Description | Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Webstar | 4.0 | All | All | All |
| Application | Kerio | Webstar | 5.1.2 | All | All | All |
| Application | Kerio | Webstar | 5.1.3 | All | All | All |
| Application | Kerio | Webstar | 5.2 | All | All | All |
| Application | Kerio | Webstar | 5.2.1 | All | All | All |
| Application | Kerio | Webstar | 5.2.2 | All | All | All |
| Application | Kerio | Webstar | 5.2.3 | All | All | All |
| Application | Kerio | Webstar | 5.2.4 | All | All | All |
| Application | Kerio | Webstar | 5.3 | All | All | All |
| Application | Kerio | Webstar | 5.3.1 | All | All | All |
| Application | Kerio | Webstar | 5.3.2 | All | All | All |
| Application | Kerio | Webstar | 5.3.3 | All | All | All |
| Application | Kerio | Webstar | 5.3.4 | All | All | All |
| Application | Kerio | Webstar | 5.4 | All | All | All |
| Application | Kerio | Webstar | 4.0 | All | All | All |
| Application | Kerio | Webstar | 5.1.2 | All | All | All |
| Application | Kerio | Webstar | 5.1.3 | All | All | All |
| Application | Kerio | Webstar | 5.2 | All | All | All |
| Application | Kerio | Webstar | 5.2.1 | All | All | All |
| Application | Kerio | Webstar | 5.2.2 | All | All | All |
| Application | Kerio | Webstar | 5.2.3 | All | All | All |
| Application | Kerio | Webstar | 5.2.4 | All | All | All |
| Application | Kerio | Webstar | 5.3 | All | All | All |
| Application | Kerio | Webstar | 5.3.1 | All | All | All |
| Application | Kerio | Webstar | 5.3.2 | All | All | All |
| Application | Kerio | Webstar | 5.3.3 | All | All | All |
| Application | Kerio | Webstar | 5.3.4 | All | All | All |
| Application | Kerio | Webstar | 5.4 | All | All | All |
| Application | Kerio | Webstar | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| Kerio WebSTAR "libucache.dylib" Privilege Escalation - Advisories - Secunia | SECUNIA | secunia.com | Exploit, Vendor Advisory |
| 404 Not Found | www.digitalmunition.com | ||
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| www.digitalmunition.com/DMA[2006-1115a].txt | MISC | www.digitalmunition.com | Broken Link |
| CXSecurity - IDS | SREASON | securityreason.com | |
| SecurityTracker.com Archives - Kerio WebSTAR Lets Certain Local Users Gain Root Privileges | SECTRACK | securitytracker.com | Exploit |
| 30450 | OSVDB | www.osvdb.org | Exploit |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Kerio WebStar Local Privilege Escalation Vulnerability | BID | www.securityfocus.com | Exploit |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.