← Database

CVE-2006-6131

MEDIUM CVSS: 6.2 Published: 2006-11-28 Modified: 2026-06-16

Description

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

Affected Platforms

Kerio Webstar

Weakness Type

NVD-CWE-Other

References