OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
AV:L/AC:L/Au:N/C:C/I:C/A:C
17/10/2006
by Apple
7 months ago
by Openbase International LTD
16 years ago