{"id":"CVE-2006-6131","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-6131","generatedAt":"2026-10-27T19:57:03.165Z","title":"Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library…","description":"Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory.","published":"2006-11-28T01:07:00.000Z","lastModified":"2026-06-16T22:32:32.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.2,"severity":"MEDIUM","vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C"},"cwe":[],"affected":["kerio/webstar"],"epss":{"score":0.00886,"percentile":0.59008,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2006-11-15","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":2788,"kind":"exploit","title":"Kerio WebSTAR 5.4.2 (OSX) - 'libucache.dylib' Local Privilege Escalation","url":"https://www.exploit-db.com/exploits/2788","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/osx/local/2788.pl","file":"exploits/osx/local/2788.pl","published":"2006-11-15","added":"2006-11-14","updated":"2016-09-14","author":"Kevin Finisterre","type":"local","platform":"osx","port":null,"verified":true,"codes":["CVE-2006-6131"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comkerio-webstar-5.4.2-mac.bin","screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB (verified), so the technical barrier is gone even though the severity is medium and EPSS is 0.9%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://secunia.com/advisories/22906","tags":["Exploit","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/1921","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1017239","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/30450","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/451832/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/21123","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/4539","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22906","tags":["Exploit","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/1921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1017239","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalmunition.com/DMA%5B2006-1115a%5D.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/30450","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451832/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/21123","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30308","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-6131","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}