Published: 10/11/2006 Updated: 19/10/2017

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 465

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Untrusted search path vulnerability in openexec in OpenBase SQL prior to 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openbase international ltd openbase 10.0
openbase international ltd openbase 7.0.15
openbase international ltd openbase 8.0.4
openbase international ltd openbase 9.1.5

#!/usr/bin/perl # # wwwdigitalmunitioncom # written by kf (kf_lists[at]digitalmunition[dot]com) # # <= ftp://wwwopenbasecom/pub/OpenBase_100 (vulnerable) ? # # This is some fairly blatant and retarded use of system() # # cd cp chmod chown rm mkdir and killall appear as strings in the binary hrmm can you cay system() ! # -restart -Mac ...

NVD-CWE-Other http://www.digitalmunition.com/DMA%5B2006-1107a%5D.txt http://secunia.com/advisories/22742 http://www.vupen.com/english/advisories/2006/4404 http://marc.info/?l=full-disclosure&m=116296717330758&w=2 https://www.exploit-db.com/exploits/2738 https://nvd.nist.gov https://www.exploit-db.com/exploits/2738/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-5852

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect