Vulnerability CVE-2006-6131
Published: 2006-11-27   Modified: 2012-02-12

Description:
Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Kerio WebSTAR local privilege escalation
Kevin Finisterre
28.11.2006

Type:

CWE-Other

CVSS2 => (AV:L/AC:H/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.2/10
10/10
1.9/10
Exploit range
Attack complexity
Authentication
Local
High
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Kerio -> Webstar 

 References:
http://securityreason.com/securityalert/1921
http://securitytracker.com/id?1017239
http://www.securityfocus.com/archive/1/451832/100/200/threaded
http://www.securityfocus.com/bid/21123
http://www.vupen.com/english/advisories/2006/4539
https://exchange.xforce.ibmcloud.com/vulnerabilities/30308
Copyright 2024, cxsecurity.com

 

Back to Top