cve/2006/CVE-2006-5852.md

CVE-2006-5852

Description

Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.

POC

Reference

• https://www.exploit-db.com/exploits/2738
• https://www.exploit-db.com/exploits/2738

Github

No PoCs found on GitHub currently.