Login Request a demo
Unscored severity · published Oct 17, 2006
CVE-2006-5328
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the…
–
CVSS
0.3%
EPSS
No
On KEV
Description
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openbase · Openbase International Ltd
through 10.0; 7.0.15; 8.0.4; 9.1.5 · source: NVD
XC
Xcode · Apple
through 2.2 · source: NVD
Affected product
XC
Xcode
Apple
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5328
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5328
lists.apple.com
http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
Vendor Advisory
http://secunia.com/advisories/22390
secunia.com
http://secunia.com/advisories/27441
www.digitalmunition.com
http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt
www.digitalmunition.com
http://www.digitalmunition.com/Xcode_OpenBase_createfile.pl
www.securityfocus.com
http://www.securityfocus.com/bid/20562
More from Xcode
8.0
CVE-2025-48384
Git allows arbitrary code execution through broken config quoting
9.8
CVE-2014-9390
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode…
9.8
CVE-2019-14379
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of…
9.8
CVE-2018-4164
An issue was discovered in certain Apple products
9.8
CVE-2016-0746
Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or…