Unscored severity · published Aug 18, 2006
CVE-2006-4232
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GT
Globus Toolkit · Globus
3.2.0; 4.0.0; 4.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4232
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4232
Patch
http://secunia.com/advisories/21516
Patch
http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html
Patch
http://www.securityfocus.com/bid/19549
www.vupen.com
http://www.vupen.com/english/advisories/2006/3290
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/28408
More from Globus Toolkit
–
CVE-2012-3292
The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow…
–
CVE-2011-0738
MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server,…
–
CVE-2007-2784
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier (globus_nexus-6.6 and earlier) allows remote attackers to cause a denial of service (resource…
–
CVE-2006-4233
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on…