CVE-2006-5328
published 2006-10-17CVE-2006-5328: OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a…
PriorityP424high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.34%
26.4th percentile
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | xcode | <= 2.2 | — |
| openbase_international_ltd | openbase | <= 10.0 | — |
| openbase_international_ltd | openbase | — | — |
| openbase_international_ltd | openbase | — | — |
| openbase_international_ltd | openbase | — | — |
| openbase_international_ltd | openbase | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5fg2-7wf7-v2h5: OpenBase SQL 10
ghsa_unreviewed·2022-05-01
CVE-2006-5328 [HIGH] GHSA-5fg2-7wf7-v2h5: OpenBase SQL 10
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
GHSA
GHSA-gph2-ph9g-mqfq: openexec in OpenBase SQL before 10
ghsa_unreviewed·2022-05-01·CVSS 7.2
CVE-2006-5851 [HIGH] CWE-59 GHSA-gph2-ph9g-mqfq: openexec in OpenBase SQL before 10
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.htmlhttp://secunia.com/advisories/22390http://secunia.com/advisories/27441http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txthttp://www.digitalmunition.com/Xcode_OpenBase_createfile.plhttp://www.securityfocus.com/bid/20562http://www.securitytracker.com/id?1018872http://www.vupen.com/english/advisories/2007/3665http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.htmlhttp://secunia.com/advisories/22390http://secunia.com/advisories/27441http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txthttp://www.digitalmunition.com/Xcode_OpenBase_createfile.plhttp://www.securityfocus.com/bid/20562http://www.securitytracker.com/id?1018872http://www.vupen.com/english/advisories/2007/3665
2006-10-17
Published