Описание
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-5328
- http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
- http://secunia.com/advisories/22390
- http://secunia.com/advisories/27441
- http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt
- http://www.digitalmunition.com/DMA[2006-1016a].txt
- http://www.digitalmunition.com/Xcode_OpenBase_createfile.pl
- http://www.securityfocus.com/bid/20562
- http://www.securitytracker.com/id?1018872
- http://www.vupen.com/english/advisories/2007/3665
EPSS
Процентиль: 28%
0.00099
Низкий
CVE ID
Связанные уязвимости
nvd
больше 19 лет назад
OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
EPSS
Процентиль: 28%
0.00099
Низкий