VULNERABILITY INTELLIGENCE
CVE-2006-6131
CVSS score6.2 NONE
EPSS probability0.89%
CISA KEVNot currently listed
Published2006-11-28
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit