openbase international ltd vulnerabilities and exploits

(subscribe to this query)

2.1

CVSSv2

openexec in OpenBase SQL prior to 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

Openbase International Ltd Openbase 9.1.5 Openbase International Ltd Openbase 10.0 Openbase International Ltd Openbase 7.0.15 Openbase International Ltd Openbase 8.0.4

1 EDB exploit

4.6

CVSSv2

Untrusted search path vulnerability in openexec in OpenBase SQL prior to 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.

Openbase International Ltd Openbase 10.0 Openbase International Ltd Openbase 7.0.15 Openbase International Ltd Openbase 8.0.4 Openbase International Ltd Openbase 9.1.5

1 EDB exploit

7.2

CVSSv2

OpenBase SQL 10.0 and previous versions, as used in Apple Xcode 2.2 2.2 and previous versions and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.

Openbase International Ltd Openbase 7.0.15 Openbase International Ltd Openbase Openbase International Ltd Openbase 9.1.5 Openbase International Ltd Openbase 8.0.4 Apple Xcode

7.2

CVSSv2

Untrusted search path vulnerability in OpenBase SQL 10.0 and previous versions, as used in Apple Xcode 2.2 2.2 and previous versions and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is ex...

Openbase International Ltd Openbase 7.0.15 Openbase International Ltd Openbase Openbase International Ltd Openbase 9.1.5 Openbase International Ltd Openbase 8.0.4 Apple Xcode

9

CVSSv2

OpenBase 10.0.5 and previous versions allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures.

Openbase International Ltd Openbase

1 EDB exploit

9

CVSSv2

Directory traversal vulnerability in OpenBase 10.0.5 and previous versions allows remote authenticated users to create files with arbitrary contents via a .. (dot dot) in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code u...

Openbase International Ltd Openbase

9

CVSSv2

Buffer overflow in OpenBase 10.0.5 and previous versions might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption.

Openbase International Ltd Openbase

9

CVSSv2

OpenBase 10.0.5 and previous versions allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear.

Openbase International Ltd Openbase

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook