PT-2006-5048 · Globus · Globus Toolkit

Publicado 2006-08-18 · Atualizado 2017-07-20 · CVE-2006-4232

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Globus Toolkit versions 3.2.x through 4.1.0

Description A race condition exists in the grid-proxy-init tool, allowing local users to potentially steal credential data. This occurs when the proxy credentials file is replaced between its creation and the check for exclusive file access.

Recommendations For Globus Toolkit versions 3.2.x through 4.1.0, consider updating to a version released after 20060815 to resolve the issue. As a temporary workaround, restrict access to the grid-proxy-init tool to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-4232

Produtos afetados

Globus Toolkit

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-4232 · Nota de Segurança
• http://secunia.com/advisories/21516 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28408 · Nota
• http://vupen.com/english/advisories/2006/3290 · Nota
• http://securityfocus.com/bid/19549 · Correção
• http://globus.org/mail_archive/security-announce/2006/08/msg00000.html · Correção