CVEvulnerability
CVE-2006-4232
1.2 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-08-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.2 LOW — AV:L/AC:H/Au:N/C:P/I:N/A:N
Description
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.
Affected configurations
• globus globus toolkit 3.2.0
• globus globus toolkit 4.0.0
• globus globus toolkit 4.1.0
References
- http://secunia.com/advisories/21516 Patch, Vendor Advisory
- http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html Patch
- http://www.securityfocus.com/bid/19549 Patch
- http://www.vupen.com/english/advisories/2006/3290 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28408 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/21516 Patch, Vendor Advisory
- http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html Patch
- http://www.securityfocus.com/bid/19549 Patch
- http://www.vupen.com/english/advisories/2006/3290 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28408 exchange.xforce.ibmcloud.com