Vulnerabilities > CVE-2006-6131 - Unspecified vulnerability in Kerio Webstar

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

kerio

NVD

Published: 2006-11-28

Updated: 2023-11-07

Summary

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

Vulnerable Configurations

Part	Description	Count
Application	Kerio Kerio Webstar 5.4 Kerio Webstar 5.3 Kerio Webstar 4.0 Kerio Webstar 5.3.1 Kerio Webstar 5.2.3 Kerio Webstar 5.3.4 Kerio Webstar 5.1.3 Kerio Webstar 5.2.4 Kerio Webstar 5.2.1 Kerio Webstar * Kerio Webstar 5.1.2 Kerio Webstar 5.2 Kerio Webstar 5.2.2 Kerio Webstar 5.3.2 Kerio Webstar 5.3.3	15

References

http://www.securityfocus.com/bid/21123
http://www.osvdb.org/30450
http://securitytracker.com/id?1017239
http://secunia.com/advisories/22906
http://securityreason.com/securityalert/1921
http://www.vupen.com/english/advisories/2006/4539
https://exchange.xforce.ibmcloud.com/vulnerabilities/30308
http://www.securityfocus.com/archive/1/451832/100/200/threaded
http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt