openexec in OpenBase SQL before 10.0.1 allows local users...
Low severity
Unreviewed
Published
May 1, 2022
to the GitHub Advisory Database
•
Updated Jan 31, 2023
Description
Published by the National Vulnerability Database
Nov 10, 2006
Published to the GitHub Advisory Database
May 1, 2022
Last updated
Jan 31, 2023
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.
References