CVE-2006-5327

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-10-17 · updated 2026-06-16

Description

Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.

Affected products

Apple Xcode: through 2.2
Openbase International Ltd Openbase: through 10.0; 7.0.15, 8.0.4, 9.1.5

References

http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
http://secunia.com/advisories/22390
http://secunia.com/advisories/22474
http://secunia.com/advisories/27441
http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt
http://www.digitalmunition.com/Xcode_OpenBase_pwn.pl
http://www.securityfocus.com/bid/20562
http://www.securitytracker.com/id?1018872
http://www.vupen.com/english/advisories/2006/4058
http://www.vupen.com/english/advisories/2006/4059
http://www.vupen.com/english/advisories/2007/3665
https://exchange.xforce.ibmcloud.com/vulnerabilities/29624

Get alerted when CVE-2006-5327 or the next vulnerability affects your stack