CVE-2006-5327

CVE-2006-5327 describes an untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, including usage in Apple Xcode 2.2 and earlier. A local attacker can execute arbitrary code by placing a malicious gzip executable on a modified PATH, which is then invoked by gnutar under certain TAR...

CVE-2006-5328

OpenBase SQL 10.0 and earlier (as used in Apple Xcode 2.2 and earlier) is affected by a local privilege escalation vulnerability where an attacker can create arbitrary files via a symlink attack on the simulation.sql file. The root cause is a symlink handling flaw that allows a local user to leve...

CVE-2006-5851

CVE-2006-5851 affects OpenBase SQL prior to 10.0.1. It enables local users to create arbitrary files via a symlink attack on the /tmp/output file, constituting a local file-creation vulnerability distinct from CVE-2006-5328. The root cause is a symlink/temporary-file handling issue in OpenBase SQ...

CVE-2006-5852

CVE-2006-5852 describes an untrusted search path vulnerability in OpenBase SQL prior to 10.0.1. Local users can gain privileges by placing a malicious helper binary in a modified PATH that OpenBase will reference, with demonstrations involving cp, rm, and killall. The vulnerability stems from PAT...

CVE-2007-5928

OpenBase 10.0.5 and earlier is affected. Remote authenticated users can trigger a free of an arbitrary memory location by supplying long strings in a SELECT statement. The root cause is unclear, with indications it may be a buffer overflow. Affected product/version: OpenBase

CVE-2007-5926

CVE-2007-5926 and CVE-2007-5927 describe vulnerabilities in OpenBase 10.0.5 and earlier. The issues allow remote authenticated users to (1) execute arbitrary commands by passing shell metacharacters to stored procedures such as AsciiBackup and OEMLicenseInstall, and (2) perform directory traversa...

CVE-2007-5929

CVE-2007-5929 describes a buffer overflow in OpenBase

CVE-2007-5927

CVE-2007-5927 (OpenBase) affects OpenBase 10.0.5 and earlier. A directory traversal issue in the GlobalLog stored procedure allows remote authenticated users to create files with arbitrary contents by supplying a leading .. sequence as the first argument. The issue is noted to be exploitable in c...