Lucene search

[email protected]CVE-2006-6131

HistoryNov 28, 2006 - 1:07 a.m.

CVE-2006-6131

2006-11-2801:07:00

[email protected]

web.nvd.nist.gov

cve-2006-6131

kerio webstar

vulnerability

security

nvd

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

Affected configurations

NVD

Node

keriowebstarRange≤5.4.2

keriowebstarMatch4.0

keriowebstarMatch5.1.2

keriowebstarMatch5.1.3

keriowebstarMatch5.2

keriowebstarMatch5.2.1

keriowebstarMatch5.2.2

keriowebstarMatch5.2.3

keriowebstarMatch5.2.4

keriowebstarMatch5.3

keriowebstarMatch5.3.1

keriowebstarMatch5.3.2

keriowebstarMatch5.3.3

keriowebstarMatch5.3.4

keriowebstarMatch5.4

CPENameOperatorVersion
kerio:webstarkerio webstarle5.4.2
kerio:webstarkerio webstareq4.0
kerio:webstarkerio webstareq5.1.2
kerio:webstarkerio webstareq5.1.3
kerio:webstarkerio webstareq5.2
kerio:webstarkerio webstareq5.2.1
kerio:webstarkerio webstareq5.2.2
kerio:webstarkerio webstareq5.2.3
kerio:webstarkerio webstareq5.2.4
kerio:webstarkerio webstareq5.3

CPE	Name	Operator	Version
kerio:webstar	kerio webstar	le	5.4.2
kerio:webstar	kerio webstar	eq	4.0
kerio:webstar	kerio webstar	eq	5.1.2
kerio:webstar	kerio webstar	eq	5.1.3
kerio:webstar	kerio webstar	eq	5.2
kerio:webstar	kerio webstar	eq	5.2.1
kerio:webstar	kerio webstar	eq	5.2.2
kerio:webstar	kerio webstar	eq	5.2.3
kerio:webstar	kerio webstar	eq	5.2.4
kerio:webstar	kerio webstar	eq	5.3

Rows per page:

1-10 of 151

References

secunia.com/advisories/22906

securityreason.com/securityalert/1921

securitytracker.com/id?1017239

www.digitalmunition.com/DMA%5B2006-1115a%5D.txt

www.osvdb.org/30450

www.securityfocus.com/archive/1/451832/100/200/threaded

www.securityfocus.com/bid/21123

www.vupen.com/english/advisories/2006/4539

exchange.xforce.ibmcloud.com/vulnerabilities/30308

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2006-6131

nvd1 cvelist1