CVEvulnerability
CVE-2006-5328
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-10-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
Affected configurations
• apple xcode (<= 2.2)
• openbase international ltd openbase (<= 10.0)
• openbase international ltd openbase 7.0.15
• openbase international ltd openbase 8.0.4
• openbase international ltd openbase 9.1.5
References
- http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html lists.apple.com
- http://secunia.com/advisories/22390 Vendor Advisory
- http://secunia.com/advisories/27441 secunia.com
- http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt www.digitalmunition.com
- http://www.digitalmunition.com/Xcode_OpenBase_createfile.pl www.digitalmunition.com
- http://www.securityfocus.com/bid/20562 www.securityfocus.com
- http://www.securitytracker.com/id?1018872 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3665 www.vupen.com
- http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html lists.apple.com
- http://secunia.com/advisories/22390 Vendor Advisory
- http://secunia.com/advisories/27441 secunia.com
- http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt www.digitalmunition.com
- http://www.digitalmunition.com/Xcode_OpenBase_createfile.pl www.digitalmunition.com
- http://www.securityfocus.com/bid/20562 www.securityfocus.com
- http://www.securitytracker.com/id?1018872 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3665 www.vupen.com