CVE-2006-5327
First published: Tue Oct 17 2006(Updated: )
Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openbase International Ltd Openbase | =7.0.15 | |
| Openbase International Ltd Openbase | <=10.0 | |
| Openbase International Ltd Openbase | =9.1.5 | |
| Openbase International Ltd Openbase | =8.0.4 | |
| Apple Xcode | <=2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.digitalmunition.com/Xcode_OpenBase_pwn.pl
- http://www.securityfocus.com/bid/20562
- http://secunia.com/advisories/22390
- http://secunia.com/advisories/22474
- http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
- http://www.securitytracker.com/id?1018872
- http://secunia.com/advisories/27441
- http://www.vupen.com/english/advisories/2007/3665
- http://www.vupen.com/english/advisories/2006/4058
- http://www.vupen.com/english/advisories/2006/4059
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29624
- http://www.digitalmunition.com/DMA[2006-1016a].txt
- http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/weakness
- agent/type
- agent/severity
- agent/author
- agent/references
- agent/description
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/openbase international ltd
- canonical/openbase international ltd openbase
- version/openbase international ltd openbase/7.0.15
- version/openbase international ltd openbase/10.0
- version/openbase international ltd openbase/9.1.5
- version/openbase international ltd openbase/8.0.4
- vendor/apple
- canonical/apple xcode
- version/apple xcode/2.2