CVE-2006-5327

Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local…

published October 17, 2006

CVSS
—
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00601 · 48.1th percentile
Published
2006-10-17T21:00Z
EPSS history
Timeline
  • 17 OCT 21:00Z
    Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local…
    cvelistv5