Vulnerability in Openbase International Ltd
CVE-2006-5851
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 2.1 (Low). Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.007 (52.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 53rd percentile — 52.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: -0.000
Affected products
- Openbase International Ltd — versions 7.0.15, 8.0.4, 9.1.5
Weakness classification (CWE)
References
- secunia.com/advisories/22742 (Vendor Advisory, third-party-advisory)
- marc.info/ (mailing-list, Mailing List)
- www.vupen.com/english/advisories/2006/4404 (vdb-entry, Not Applicable)
- www.exploit-db.com/exploits/2737 (exploit)
- www.digitalmunition.com/DMA[2006-1107a].txt (Exploit)