Openbase

openbase

Vendor: Openbase International Ltd • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-5929 1Openbase International Ltd 1Openbase Apr 23, 2026 Nov 10, 2007 N/A· v4 N/A· v3 9.0 HIGH· v2 Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking thi...Show more Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption.Show less
CVE-2007-5928 1Openbase International Ltd 1Openbase Apr 23, 2026 Nov 10, 2007 N/A· v4 8.1 HIGH· v3 9.0 HIGH· v2 OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear.
CVE-2007-5927 1Openbase International Ltd 1Openbase Apr 23, 2026 Nov 10, 2007 N/A· v4 8.1 HIGH· v3 9.0 HIGH· v2 Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. (dot dot) in the first argument to the GlobalLog stored procedure. NOTE...Show more Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. (dot dot) in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926.Show less
CVE-2007-5926 1Openbase International Ltd 1Openbase Apr 23, 2026 Nov 10, 2007 N/A· v4 N/A· v3 9.0 HIGH· v2 OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures.
CVE-2006-5852 1Openbase International Ltd 1Openbase Apr 23, 2026 Nov 10, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3...Show more Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.Show less
CVE-2006-5851 1Openbase International Ltd 1Openbase Apr 23, 2026 Nov 10, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.
CVE-2006-5328 2Apple Openbase International Ltd 2Openbase Xcode Apr 23, 2026 Oct 17, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
CVE-2006-5327 2Apple Openbase International Ltd 2Openbase Xcode Apr 23, 2026 Oct 17, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that referenc...Show more Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.Show less