CVE-2006-4232

2006-08-1820:04:00

[email protected]

web.nvd.nist.gov

CVSS2

1.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.

Affected configurations

Nvd

Node

globusglobus_toolkitMatch3.2.0

globusglobus_toolkitMatch4.0.0

globusglobus_toolkitMatch4.1.0

VendorProductVersionCPE
globusglobus_toolkit3.2.0cpe:2.3:a:globus:globus_toolkit:3.2.0:*:*:*:*:*:*:*
globusglobus_toolkit4.0.0cpe:2.3:a:globus:globus_toolkit:4.0.0:*:*:*:*:*:*:*
globusglobus_toolkit4.1.0cpe:2.3:a:globus:globus_toolkit:4.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
globus	globus_toolkit	3.2.0	cpe:2.3:a:globus:globus_toolkit:3.2.0:::::::*
globus	globus_toolkit	4.0.0	cpe:2.3:a:globus:globus_toolkit:4.0.0:::::::*
globus	globus_toolkit	4.1.0	cpe:2.3:a:globus:globus_toolkit:4.1.0:::::::*