CVE-2006-6131 Information

Description

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

Reference

http://secunia.com/advisories/22906 http://securityreason.com/securityalert/1921 http://securitytracker.com/id?1017239 http://www.digitalmunition.com/DMA[2006-1115a].txt http://www.osvdb.org/30450 http://www.securityfocus.com/archive/1/451832/100/200/threaded http://www.securityfocus.com/bid/21123 http://www.vupen.com/english/advisories/2006/4539 https://exchange.xforce.ibmcloud.com/vulnerabilities/30308