7.2

CVE-2006-5327

Exploit
Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ XCode Version <= 2.2
Openbase International Ltd ≫ Openbase Editionmac_os_x Version <= 10.0
Openbase International Ltd ≫ Openbase Version7.0.15 Editionmac_os_x
Openbase International Ltd ≫ Openbase Version8.0.4 Editionmac_os_x
Openbase International Ltd ≫ Openbase Version9.1.5 Editionmac_os_x
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.57% 0.425
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
http://secunia.com/advisories/27441
http://www.securitytracker.com/id?1018872
http://www.vupen.com/english/advisories/2007/3665
http://secunia.com/advisories/22390
Patch
Vendor Advisory
http://secunia.com/advisories/22474
Patch
Vendor Advisory
http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt
http://www.digitalmunition.com/Xcode_OpenBase_pwn.pl
http://www.securityfocus.com/bid/20562
Exploit
http://www.vupen.com/english/advisories/2006/4058
http://www.vupen.com/english/advisories/2006/4059
https://exchange.xforce.ibmcloud.com/vulnerabilities/29624