Lucene search

K
cve[email protected]CVE-2006-5851
HistoryNov 10, 2006 - 2:07 a.m.

CVE-2006-5851

2006-11-1002:07:00
CWE-59
web.nvd.nist.gov
22
cve-2006-5851
openbase sql
symlink attack
arbitrary files
local users
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.8%

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

Affected configurations

NVD
Node
openbase_international_ltdopenbaseMatch7.0.15mac_os_x
OR
openbase_international_ltdopenbaseMatch8.0.4mac_os_x
OR
openbase_international_ltdopenbaseMatch9.1.5mac_os_x
OR
openbase_international_ltdopenbaseMatch10.0mac_os_x

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.8%

Related for CVE-2006-5851