Every CVE Search/ Get API key

CVE-2006-5851

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink...

2.1 LowPublic exploit

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

Exploit likelihood

0.76%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

Record
CVE-2006-5851
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

Record
CVE-2006-5851
Updated
2026-11-02
EUVDEUVD-2006-5835 No score

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

Record
EUVD-2006-5835
Updated
2026-11-03
GitHub AdvisoriesGHSA-gph2-ph9g-mqfq No score

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink...

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

Record
GHSA-gph2-ph9g-mqfq
Weakness
CWE-59
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBXcode OpenBase 10.0.0 (OSX) - Symlink Privilege Escalation2006-11-08

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-5851 is a low vulnerability (CVSS 2.1) in Openbase International Ltd Openbase, published November 10, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. No source names a fixed version.

References

MoveEnter Open