« Volver al listado

CVE-2006-6131

Estado: ModificadaMedia (6.2)—

Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Kerio — Webstar

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6131",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 1.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-11-28T01:07:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/22906",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/1921",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017239",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/30450",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/451832/100/200/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21123",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4539",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30308",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/22906",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/1921",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017239",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/30450",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/451832/100/200/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21123",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4539",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30308",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ruta de búsqueda no confiable en (1) WSAdminServer y (2) WSWebServer en Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 y anteriores permite a atacantes remotos con privilegios webstar obtener privilegios de root mediante una librería de ayuda libucache.dylib maliciosa en el directorio de trabajo actual."
    }
  ],
  "lastModified": "2026-06-16T22:32:31.717",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kerio:webstar:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7F28702-84B0-42A3-A244-53F3D94F6BC3",
              "versionEndIncluding": "5.4.2"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C1D166E-75B3-4EB3-98AF-6833ABD5B8E2"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2E97519-73F0-4458-BB7B-DA586822D3AB"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "972BFD94-E0AE-4FC3-939B-92755E1DFEF3"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40545A77-1C92-4794-99B9-F702092A3119"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02B475F7-CA40-4253-A035-43CFAF3CAA5E"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04E6E05E-3917-4BCA-8EFC-478BC6D47140"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "977ACE5E-7B5E-4BB2-9E0D-4B1207767A00"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F99FFA5-A88D-480D-BCB6-C7FA240758E5"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60FB0855-0483-491C-AECC-B72E3C7349F9"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F405A681-5451-455E-AC82-4CA6BB023684"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F592F600-295A-4F0F-A5BB-02ED95FA95F4"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84F7E9C9-4FFC-45B3-B031-385769F008BD"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.3.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F0963F3-EA87-4337-90C2-4DFA80B79D7E"
            },
            {
              "criteria": "cpe:2.3:a:kerio:webstar:5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5E33D19-BA94-4444-8C9F-43F92147F782"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "Successful exploitation requires that the attacker is part of the \"admin\" group or the \"webstar\" user."
}