Lucene search

[email protected]CVE-2006-5328

HistoryOct 17, 2006 - 9:07 p.m.

CVE-2006-5328

2006-10-1721:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-5328

nvd

openbase sql

symlink attack

local users

arbitrary files

6.7 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

24.6%

JSON

OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.

CPENameOperatorVersion
openbase_international_ltd:openbaseopenbase international ltd openbaseeq7.0.15
openbase_international_ltd:openbaseopenbase international ltd openbasele10.0
openbase_international_ltd:openbaseopenbase international ltd openbaseeq9.1.5
openbase_international_ltd:openbaseopenbase international ltd openbaseeq8.0.4
apple:xcodeapple xcodele2.2

CPE	Name	Operator	Version
openbase_international_ltd:openbase	openbase international ltd openbase	eq	7.0.15
openbase_international_ltd:openbase	openbase international ltd openbase	le	10.0
openbase_international_ltd:openbase	openbase international ltd openbase	eq	9.1.5
openbase_international_ltd:openbase	openbase international ltd openbase	eq	8.0.4
apple:xcode	apple xcode	le	2.2

References

lists.apple.com/archives/security-announce/2007/Oct/msg00001.html

secunia.com/advisories/22390

secunia.com/advisories/27441

www.digitalmunition.com/DMA%5B2006-1016a%5D.txt

www.digitalmunition.com/Xcode_OpenBase_createfile.pl

www.securityfocus.com/bid/20562

www.securitytracker.com/id?1018872

www.vupen.com/english/advisories/2007/3665

6.7 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

24.6%

JSON

Related for CVE-2006-5328

cve1