NVD

Id
63930  
Name
CVE-2006-5327  
Description
Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-10-17  
Modified Date
2011-03-07  
Seq
2006-5327  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333223 63930 CVE-2006-5327 APPLE-SA-2007-10-30  View
333224 63930 CVE-2006-5327 http://www.digitalmunition.com/DMA[2006-1016a].txt  View
333225 63930 CVE-2006-5327 http://www.digitalmunition.com/Xcode_OpenBase_pwn.pl  View
333226 63930 CVE-2006-5327 20562  View
333227 63930 CVE-2006-5327 1018872  View
333228 63930 CVE-2006-5327 ADV-2006-4058  View
333229 63930 CVE-2006-5327 ADV-2006-4059  View
333230 63930 CVE-2006-5327 ADV-2007-3665  View
333231 63930 CVE-2006-5327 openbase-sql-privilege-escalation(29624)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58713 JVNDB-2006-000979 OpenBase SQL における任意のコードを実行される脆弱性 Apple Xcode 等で使用される OpenBase SQL には、不正な gzip プログラムを参照することにより、PATH を修正されることで、任意のコードを実行される脆弱性が存在します。 CVE-2006-5327 21429 CVE-2006-5327 63930 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000979.html 2006-10-17 2007-11-27 View