CVE-2006-5328: Apple Xcode

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.

Affected products

• Apple Xcode: up to and including 2.2
• Openbase International Ltd Openbase: up to and including 10.0; version 7.0.15 only; version 8.0.4 only; version 9.1.5 only

Published 2006-10-17. Last modified 2026-06-16.