105 matches found
CVE-2006-6131
Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...
CVE-2006-6131
CVE-2006-6131 describes an untrusted search path vulnerability in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier. The affected components are WSAdminServer and WSWebServer. Local users with webstar privileges can gain root privileges by placing a malicious libucache.dylib in the curren...
CVE-2006-6131
Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...
Kerio WebStar本地权限提升漏洞
Kerio WebSTAR是运行在Mac OS X平台上的WEB服务器。 Kerio WebSTAR在不安全的权限安装程序文件，本地攻击者可能利用此提升自己的权限。 在安装Kerio WebSTAR时/Applications中继承了两个setuid二进制程序： kevin-finisterres-computer:/Desktop kf$ find /Applications/Kerio\ WebSTAR -perm -4000 -ls 978790 3016 -rwsrwx--x 1 root admin 1542556 Apr 10 2006 /Applications/Kerio...
Exploits Kerio WebStar libucache.dylib privilege escalation
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key;...
[Full-disclosure] Kerio WebSTAR local privilege escalation
DMA2006-1115a - 'Kerio WebSTAR local privilege escalation' Author: Kevin Finisterre Vendors: http://www.kerio.com/webstarhome.html Product: 'Kerio WebSTAR = 5.4.2 ?' References: http://www.digitalmunition.com/DMA2006-1115a.txt Description: Kerio WebSTAR is an easy-to-use web server for Mac OS X...
kerio_WebSTAR_pwn.pl.txt
!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...
Kerio Webstar privilege escalation
Suid application loads library from current directory...
Kerio WebSTAR 5.4.2 (OSX) - libucache.dylib Local Privilege Escalation
Kerio WebSTAR 5.4.2 OSX - libucache.dylib Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach...
Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX)
Exploit for macOS platform in category local exploits ======================================================================== Kerio WebSTAR 5.4.2 libucache.dylib Privilege Escalation Exploit OSX ======================================================================== !/usr/bin/perl...
Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key;...
Kerio WebSTAR 5.4.2 (OSX) - 'libucache.dylib' Local Privilege Escalation
!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...
WebSTAR FTP Server USER Overflow
This module exploits a stack buffer overflow in the logging routine of the WebSTAR FTP server. Reliable code execution is obtained by a series of hops through the System library. This module requires Metasploit: https://metasploit.com/download Current source:...
4D WebStar Tomcat Plugin Remote Buffer Overflow flaw
The remote server is running 4D WebStar Web Server. The remote server is vulnerable to a remote buffer overflow in its Tomcat plugin. A malicious user may be able to crash service or execute arbitrary code on the computer with the privileges of the HTTP server. OpenVAS Vulnerability Test $Id:...
4D WebStar Symbolic Link Vulnerability
The remote server is running 4D WebStar FTP Server. 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Successful...
4D WebStar Tomcat Plugin Remote Buffer Overflow flaw
The remote 4D WebStar Web Server is vulnerable to a remote buffer overflow in its Tomcat plugin. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
4D WebStar Symbolic Link Vulnerability
4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2005-3143
Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...
CVE-2005-3143
CVE-2005-3143 affects the Mailbox Server for 4D WebStar prior to 5.3.5. It allows denial-of-service (crash) via IMAP clients on Mac OS X Mail 2. The NVD/Nessus entries document the issue; no exploitation details are provided in the connected documents, and no remediation details are stated here.