CVE-2006-5851: openbase_international_ltd openbase Link Following

EPSS trend

Probability

0.76%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

+0.01 pp

From 0.75% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.76%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (digitalmunition.com)
Maturity: unknown
exploit-databaselocalosxVerified
Xcode OpenBase 10.0.0 (OSX) - Symlink Privilege Escalation
Maturity: weaponized

References

5 links

secunia.com/advisories/22742Third Party AdvisoryX Refsource SECUNIAVendor Advisory
marc.info?l=full-disclosure&m=116296717330758&w=2Mailing ListX Refsource FULLDISC
www.vupen.com/english/advisories/2006/4404VDB EntryX Refsource VUPENNot Applicable
www.exploit-db.com/exploits/2737ExploitX Refsource EXPLOIT DB
www.digitalmunition.com/DMA%5B2006-1107a%5D.txtX Refsource MISCExploit

Related vulnerabilities

CVE-2007-5926openbase_international_ltdopenbase3.44%18y ago10-11-2007 02:00OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures.CVE-2007-5929openbase_international_ltdopenbase4.11%18y ago10-11-2007 02:00Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption.CVE-2007-5927openbase_international_ltdopenbase3.97%18y ago10-11-2007 02:00Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. (dot dot) in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926.CVE-2007-5928openbase_international_ltdopenbase1.76%18y ago10-11-2007 02:00OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear.CVE-2006-5328applexcode+10.34%20y ago17-10-2006 21:00OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.CVE-2006-5852openbase_international_ltdopenbase0.78%19y ago10-11-2006 02:00Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.

All vulnerabilities inopenbase

CVE-2006-5851: openbase_international_ltd openbase Link Following

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References