Vulnerability Name:

CVE-2006-5852 (CCN-30244)

Assigned:2006-11-07
Published:2006-11-07
Updated:2017-10-19
Summary:Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.
CVSS v3 Severity:9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
3.8 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.9 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2006-5852

Source: FULLDISC
Type: UNKNOWN
20081108 [Full-disclosure] OpenBase SQL multiple vulnerabilities Part Deux

Source: CCN
Type: SA22742
OpenBase SQL "openexec" Privilege Escalation Vulnerability

Source: SECUNIA
Type: Vendor Advisory
22742

Source: MISC
Type: Exploit
http://www.digitalmunition.com/DMA%5B2006-1107a%5D.txt

Source: CCN
Type: DMA[2006-1107a]
OpenBase SQL multiple vulnerabilities Part Deux

Source: VUPEN
Type: UNKNOWN
ADV-2006-4404

Source: XF
Type: UNKNOWN
openbasesql-openexec-privilege-escalation(30244)

Source: EXPLOIT-DB
Type: UNKNOWN
2738

Vulnerable Configuration:Configuration 1:
  • cpe:/a:openbase_international_ltd:openbase:7.0.15:*:mac_os_x:*:*:*:*:*
  • OR cpe:/a:openbase_international_ltd:openbase:8.0.4:*:mac_os_x:*:*:*:*:*
  • OR cpe:/a:openbase_international_ltd:openbase:9.1.5:*:mac_os_x:*:*:*:*:*
  • OR cpe:/a:openbase_international_ltd:openbase:10.0:*:mac_os_x:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    openbase_international_ltd openbase 7.0.15
    openbase_international_ltd openbase 8.0.4
    openbase_international_ltd openbase 9.1.5
    openbase_international_ltd openbase 10.0