QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-5327

Back to search

CVE-2006-5327

Published: Oct 17, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.

VendorProductVersions

n/a

n/a

affected
n/a

References

22390
third-party-advisory
x_refsource_SECUNIA
ADV-2006-4058
vdb-entry
x_refsource_VUPEN
27441
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3665
vdb-entry
x_refsource_VUPEN
ADV-2006-4059
vdb-entry
x_refsource_VUPEN
1018872
vdb-entry
x_refsource_SECTRACK
APPLE-SA-2007-10-30
vendor-advisory
x_refsource_APPLE
20562
vdb-entry
x_refsource_BID
22474
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now